{"id":"CVE-2023-4574","aliases":["ALPINE-CVE-2023-4574","ALSA-2023:4952","ALSA-2023:4954","ALSA-2023:4955","ALSA-2023:4958","CLSA-2026-1785560172","DEBIAN-CVE-2023-4574","DLA-3553-1","DLA-3554-1","DSA-5485-1","DSA-5488-1","EUVD-2023-54428","GHSA-hc92-m58j-m3m5","MGASA-2023-0266","OESA-2023-1711","OESA-2023-1712","OESA-2023-1715","OESA-2026-3213","OESA-2026-3214","OESA-2026-3215","RHSA-2023:4945","RHSA-2023:4946","RHSA-2023:4947","RHSA-2023:4948","RHSA-2023:4949","RHSA-2023:4950","RHSA-2023:4951","RHSA-2023:4952","RHSA-2023:4954","RHSA-2023:4955","RHSA-2023:4956","RHSA-2023:4957","RHSA-2023:4958","RHSA-2023:4959","RHSA-2023:5019","RLSA-2023:4952","RLSA-2023:4954","SUSE-SU-2023:3519-1","SUSE-SU-2023:3559-1","SUSE-SU-2023:3562-1","SUSE-SU-2023:3664-1","UBUNTU-CVE-2023-4574","USN-6320-1","USN-6368-1","openSUSE-SU-2024:13176-1","openSUSE-SU-2024:13196-1","openSUSE-SU-2024:13197-1","openSUSE-SU-2024:13202-1","openSUSE-SU-2024:14572-1"],"status":"published","title":"Memory corruption in IPC ColorPickerShownCallback","description":"When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u003c 117, Firefox ESR \u003c 102.15, Firefox ESR \u003c 115.2, Thunderbird \u003c 102.15, and Thunderbird \u003c 115.2.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00663,"percentile":0.51977,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2023-08-30T00:00:00Z","modified":"2026-11-03T06:32:43Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"firefox-esr","fixed_in":["115.2.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"firefox-esr","fixed_in":["115.2.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"firefox-esr","fixed_in":["115.2.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"firefox-esr","fixed_in":["115.2.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"firefox-esr","fixed_in":["115.2.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"firefox-esr","fixed_in":["115.2.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["102.15.0esr-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["115.2.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["115.2.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"thunderbird","fixed_in":["1:102.15.0-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"thunderbird","fixed_in":["1:115.2.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:115.2.0-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"firefox","fixed_in":["117.0+build2-0ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"thunderbird","fixed_in":["1:102.15.1+build1-0ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","fixed_in":["1:102.15.1+build1-0ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0-1.el8_8.alma"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0-1.el8_8.alma"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0-1.el9_2.alma"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0-1.el9_2.alma"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0-1.el9_2.alma"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.12.0-1.el9_2.alma.1.tuxcare.els1"}]}],"bundled":253},{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0esr-1~deb12u1"}]}],"versions":["102.11.0esr-1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.15.0-1~deb12u1"}]}],"versions":["1:102.11.0-1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:115.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:115.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0esr-1~deb10u1"}]}],"versions":["102.1.0esr-1","102.1.0esr-2","102.10.0esr-1","102.10.0esr-1~deb10u1","102.10.0esr-1~deb11u1","102.11.0esr-1","102.11.0esr-1~deb10u1","102.11.0esr-1~deb11u1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.2.0esr-1","102.3.0esr-1","102.3.0esr-1~deb10u1","102.3.0esr-1~deb10u2","102.3.0esr-1~deb11u1","102.4.0esr-1","102.4.0esr-1~deb10u1","102.4.0esr-1~deb11u1","102.5.0esr-1","102.5.0esr-1~deb10u1","102.5.0esr-1~deb11u1","102.6.0esr-1","102.6.0esr-1~deb10u1","102.6.0esr-1~deb11u1","102.7.0esr-1","102.7.0esr-1~deb10u1","102.7.0esr-1~deb11u1","102.8.0esr-1","102.8.0esr-1~deb10u1","102.8.0esr-1~deb11u1","102.9.0esr-1","102.9.0esr-1~deb10u1","102.9.0esr-1~deb11u1","102.9.0esr-2","60.7.2esr-1","60.8.0esr-1","60.8.0esr-1~deb10u1","60.8.0esr-1~deb8u1","60.8.0esr-1~deb9u1","60.9.0esr-1~deb10u1","60.9.0esr-1~deb8u1","60.9.0esr-1~deb8u2","60.9.0esr-1~deb9u1","68.0.2esr-1","68.1.0esr-1","68.10.0esr-1","68.10.0esr-1~deb10u1","68.10.0esr-1~deb9u1","68.11.0esr-1","68.11.0esr-1~deb10u1","68.11.0esr-1~deb9u1","68.12.0esr-1","68.12.0esr-1~deb10u1","68.12.0esr-1~deb9u1","68.2.0esr-1","68.2.0esr-1~deb10u1","68.2.0esr-1~deb8u1","68.2.0esr-1~deb9u1","68.2.0esr-1~deb9u2","68.3.0esr-1","68.3.0esr-1~deb10u1","68.3.0esr-1~deb8u1","68.3.0esr-1~deb9u1","68.4.0esr-1","68.4.0esr-1~deb10u1","68.4.0esr-1~deb8u1","68.4.0esr-1~deb9u1","68.4.1esr-1","68.4.1esr-1~deb10u1","68.4.1esr-1~deb8u1","68.4.1esr-1~deb9u1","68.4.2esr-1","68.5.0esr-1","68.5.0esr-1~deb10u1","68.5.0esr-1~deb8u1","68.5.0esr-1~deb9u1","68.6.0esr-1","68.6.0esr-1~deb10u1","68.6.0esr-1~deb8u1","68.6.0esr-1~deb9u1","68.6.1esr-1","68.6.1esr-1~deb10u1","68.6.1esr-1~deb9u1","68.7.0esr-1","68.7.0esr-1~deb10u1","68.7.0esr-1~deb8u1","68.7.0esr-1~deb9u1","68.8.0esr-1","68.8.0esr-1~deb10u1","68.8.0esr-1~deb8u1","68.8.0esr-1~deb9u1","68.9.0esr-1","68.9.0esr-1~deb10u1","68.9.0esr-1~deb8u1","68.9.0esr-1~deb8u2","68.9.0esr-1~deb9u1","78.10.0esr-1","78.10.0esr-1~deb10u1","78.10.0esr-1~deb9u1","78.11.0esr-1","78.11.0esr-1~deb10u1","78.11.0esr-1~deb9u1","78.12.0esr-1","78.12.0esr-1~deb10u1","78.12.0esr-1~deb9u1","78.13.0esr-1","78.13.0esr-1~deb10u1","78.13.0esr-1~deb11u1","78.13.0esr-1~deb9u1","78.14.0esr-1","78.14.0esr-1~deb10u1","78.14.0esr-1~deb11u1","78.14.0esr-1~deb9u1","78.15.0esr-1~deb10u1","78.15.0esr-1~deb11u1","78.15.0esr-1~deb9u1","78.2.0esr-1","78.3.0esr-1","78.3.0esr-1~deb10u1","78.3.0esr-1~deb9u1","78.3.0esr-1~deb9u2","78.3.0esr-2","78.4.0esr-1","78.4.0esr-1~deb10u1","78.4.0esr-1~deb10u2","78.4.0esr-1~deb9u1","78.4.0esr-2","78.4.1esr-1","78.4.1esr-1~deb10u1","78.4.1esr-1~deb9u1","78.4.1esr-2","78.5.0esr-1","78.5.0esr-1~deb10u1","78.5.0esr-1~deb9u1","78.6.0esr-1","78.6.0esr-1~deb10u1","78.6.0esr-1~deb9u1","78.6.1esr-1","78.6.1esr-1~deb10u1","78.6.1esr-1~deb9u1","78.7.0esr-1","78.7.0esr-1~deb10u1","78.7.0esr-1~deb9u1","78.8.0esr-1","78.8.0esr-1~deb10u1","78.8.0esr-1~deb9u1","78.9.0esr-1","78.9.0esr-1~deb10u1","78.9.0esr-1~deb9u1","91.0.1esr-1","91.0esr-1","91.1.0esr-1","91.10.0esr-1","91.10.0esr-1~deb10u1","91.10.0esr-1~deb11u1","91.10.0esr-1~deb9u1","91.11.0esr-1","91.11.0esr-1~deb10u1","91.11.0esr-1~deb11u1","91.11.0esr-1~deb9u1","91.12.0esr-1","91.12.0esr-1~deb10u1","91.12.0esr-1~deb11u1","91.13.0esr-1~deb10u1","91.13.0esr-1~deb11u1","91.2.0esr-1","91.3.0esr-1","91.3.0esr-2","91.4.0esr-1","91.4.1esr-1~deb11u1","91.4.1esr-1~deb9u1","91.5.0esr-1","91.5.0esr-1~deb10u1","91.5.0esr-1~deb11u1","91.5.0esr-1~deb9u1","91.5.1esr-1","91.6.0esr-1","91.6.0esr-1~deb10u1","91.6.0esr-1~deb11u1","91.6.0esr-1~deb9u1","91.6.1esr-1","91.6.1esr-1~deb10u1","91.6.1esr-1~deb11u1","91.6.1esr-1~deb9u1","91.7.0esr-1","91.7.0esr-1~deb10u1","91.7.0esr-1~deb11u1","91.7.0esr-1~deb9u1","91.8.0esr-1","91.8.0esr-1~deb10u1","91.8.0esr-1~deb11u1","91.8.0esr-1~deb9u1","91.9.0esr-1","91.9.0esr-1~deb10u1","91.9.0esr-1~deb11u1","91.9.0esr-1~deb9u1","91.9.1esr-1","91.9.1esr-1~deb10u1","91.9.1esr-1~deb11u1","91.9.1esr-1~deb9u1"],"bundled":5},{"source":"osv","ecosystem":"Debian:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.15.0-1~deb10u1"}]}],"versions":["1:102.0.1-1","1:102.0.2-1","1:102.0~b4-1","1:102.0~b7-1","1:102.1.0-1","1:102.1.1-1","1:102.1.2-1","1:102.10.0-1","1:102.10.0-1~deb10u1","1:102.10.0-1~deb11u1","1:102.11.0-1","1:102.11.0-1~deb10u1","1:102.11.0-1~deb11u1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.2.0-1","1:102.2.1-1","1:102.2.2-1","1:102.3.0-1","1:102.3.0-1~deb10u1","1:102.3.0-1~deb11u1","1:102.3.1-1","1:102.3.2-1","1:102.3.3-1","1:102.4.0-1","1:102.4.0-1~deb10u1","1:102.4.0-1~deb11u1","1:102.4.1-1","1:102.5.0-1","1:102.5.0-1~deb10u1","1:102.5.0-1~deb11u1","1:102.5.1-1","1:102.6.0-1","1:102.6.0-1~deb10u1","1:102.6.0-1~deb11u1","1:102.7.1+1-1","1:102.7.1-1","1:102.7.2-1","1:102.8.0-1","1:102.8.0-1~deb10u1","1:102.8.0-1~deb11u1","1:102.9.0-1","1:102.9.0-1~deb10u1","1:102.9.0-1~deb11u1","1:102.9.1-1","1:60.7.2-1","1:60.8.0-1","1:60.8.0-1~deb10u1","1:60.8.0-1~deb8u1","1:60.8.0-1~deb9u1","1:60.8.0-2","1:60.9.0-1","1:60.9.0-1~deb10u1","1:60.9.0-1~deb8u1","1:60.9.0-1~deb9u1","1:65.0~b1-1","1:66.0~b1-1","1:67.0~b3-1","1:68.0~b1-1","1:68.1.1-1~exp1","1:68.1.2-1~exp1","1:68.10.0-1","1:68.10.0-1~deb10u1","1:68.10.0-1~deb9u1","1:68.11.0-1","1:68.11.0-1~deb10u1","1:68.11.0-1~deb9u1","1:68.11.0-2","1:68.11.0-3","1:68.12.0-1","1:68.12.0-1~deb10u1","1:68.12.0-1~deb9u1","1:68.12.0-1~deb9u2","1:68.2.1-1","1:68.2.2-1","1:68.2.2-1~deb10u1","1:68.2.2-1~deb8u1","1:68.2.2-1~deb9u1","1:68.3.0-1","1:68.3.0-2","1:68.3.0-2~deb10u1","1:68.3.0-2~deb8u1","1:68.3.0-2~deb9u1","1:68.3.1-1","1:68.4.1-1","1:68.4.1-1~deb10u1","1:68.4.1-1~deb8u1","1:68.4.1-1~deb9u1","1:68.4.2-1","1:68.5.0-1","1:68.5.0-1~deb10u1","1:68.5.0-1~deb8u1","1:68.5.0-1~deb9u1","1:68.6.0-1","1:68.6.0-1~deb10u1","1:68.6.0-1~deb8u1","1:68.6.0-1~deb9u1","1:68.7.0-1","1:68.7.0-1~deb10u1","1:68.7.0-1~deb8u1","1:68.7.0-1~deb9u1","1:68.8.0-1","1:68.8.0-1~deb10u1","1:68.8.0-1~deb8u1","1:68.8.0-1~deb9u1","1:68.8.1-1","1:68.9.0-1","1:68.9.0-1~deb10u1","1:68.9.0-1~deb8u1","1:68.9.0-1~deb8u2","1:68.9.0-1~deb9u1","1:76.0~b1-1","1:76.0~b2-1","1:77.0~b1-1","1:77.0~b2-1","1:77.0~b3-1","1:78.0-1","1:78.0.1-1","1:78.0~b1-1","1:78.0~b2-1","1:78.1.0-1","1:78.1.1-1","1:78.10.0-1","1:78.10.0-1~deb10u1","1:78.10.0-1~deb9u1","1:78.10.2-1","1:78.11.0-1","1:78.11.0-1~deb10u1","1:78.11.0-1~deb9u1","1:78.11.0-2","1:78.12.0-1","1:78.12.0-1~deb10u1","1:78.12.0-1~deb9u1","1:78.13.0-1","1:78.13.0-1~deb10u1","1:78.13.0-1~deb11u1","1:78.13.0-1~deb9u1","1:78.14.0-1","1:78.14.0-1~deb10u1","1:78.14.0-1~deb11u1","1:78.14.0-1~deb9u1","1:78.2.0-1","1:78.2.1-1","1:78.2.2-1","1:78.3.1-1","1:78.3.1-2","1:78.3.1-2~deb10u1","1:78.3.1-2~deb10u2","1:78.3.1-2~deb9u1","1:78.3.2-1","1:78.3.3-1","1:78.4.0-1","1:78.4.0-1~deb10u1","1:78.4.0-1~deb9u1","1:78.4.1-1","1:78.4.2-1","1:78.4.2-1~deb10u1","1:78.4.2-1~deb9u1","1:78.5.0-1","1:78.5.0-1~deb10u1","1:78.5.0-1~deb9u1","1:78.5.1-1","1:78.5.1-1~deb10u1","1:78.5.1-1~deb9u1","1:78.6.0-1","1:78.6.0-1~deb10u1","1:78.6.0-1~deb9u1","1:78.6.1-1","1:78.7.0-1","1:78.7.0-1~deb10u1","1:78.7.0-1~deb9u1","1:78.7.1-1","1:78.8.0-1","1:78.8.0-1~deb10u1","1:78.8.0-1~deb9u1","1:78.9.0-1","1:78.9.0-1~deb10u1","1:78.9.0-1~deb9u1","1:84.0~b3-1","1:85.0~b3-1","1:86.0~b3-1","1:88.0~b2-1","1:89.0~b2-1","1:90.0~b2-1","1:91.0-1","1:91.0.2-1","1:91.0~b1-1","1:91.0~b3-1","1:91.0~b5-1","1:91.1.0-1","1:91.1.1-1","1:91.10.0-1","1:91.10.0-1~deb10u1","1:91.10.0-1~deb11u1","1:91.10.0-1~deb9u1","1:91.11.0-1","1:91.11.0-1~deb10u1","1:91.11.0-1~deb11u1","1:91.12.0-1~deb10u1","1:91.12.0-1~deb11u1","1:91.13.0-1~deb10u1","1:91.13.0-1~deb11u1","1:91.2.0-1","1:91.2.1-1","1:91.3.0-1","1:91.3.2-1","1:91.4.0-1","1:91.4.1-1","1:91.4.1-1~deb10u1","1:91.4.1-1~deb11u1","1:91.4.1-1~deb9u1","1:91.5.0-1","1:91.5.0-1~deb9u1","1:91.5.0-2","1:91.5.0-2~deb10u1","1:91.5.0-2~deb11u1","1:91.5.1-1","1:91.6.0-1","1:91.6.0-1~deb10u1","1:91.6.0-1~deb11u1","1:91.6.0-1~deb9u1","1:91.6.1-1","1:91.6.1-1~deb10u1","1:91.6.1-1~deb11u1","1:91.6.1-1~deb9u1","1:91.6.2-1","1:91.6.2-1~deb10u1","1:91.6.2-1~deb11u1","1:91.6.2-1~deb9u1","1:91.7.0-1","1:91.7.0-2","1:91.7.0-2~deb10u1","1:91.7.0-2~deb11u1","1:91.7.0-2~deb9u1","1:91.8.0-1","1:91.8.0-1~deb10u1","1:91.8.0-1~deb11u1","1:91.8.0-1~deb9u1","1:91.8.1-1","1:91.9.0-1","1:91.9.0-1~deb10u1","1:91.9.0-1~deb11u1","1:91.9.0-1~deb9u1"],"bundled":5},{"source":"osv","ecosystem":"Debian:11","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0esr-1~deb11u1"}]}],"versions":["102.1.0esr-1","102.1.0esr-2","102.10.0esr-1","102.10.0esr-1~deb10u1","102.10.0esr-1~deb11u1","102.11.0esr-1","102.11.0esr-1~deb10u1","102.11.0esr-1~deb11u1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.2.0esr-1","102.3.0esr-1","102.3.0esr-1~deb10u1","102.3.0esr-1~deb10u2","102.3.0esr-1~deb11u1","102.4.0esr-1","102.4.0esr-1~deb10u1","102.4.0esr-1~deb11u1","102.5.0esr-1","102.5.0esr-1~deb10u1","102.5.0esr-1~deb11u1","102.6.0esr-1","102.6.0esr-1~deb10u1","102.6.0esr-1~deb11u1","102.7.0esr-1","102.7.0esr-1~deb10u1","102.7.0esr-1~deb11u1","102.8.0esr-1","102.8.0esr-1~deb10u1","102.8.0esr-1~deb11u1","102.9.0esr-1","102.9.0esr-1~deb10u1","102.9.0esr-1~deb11u1","102.9.0esr-2","78.12.0esr-1","78.13.0esr-1","78.13.0esr-1~deb10u1","78.13.0esr-1~deb11u1","78.13.0esr-1~deb9u1","78.14.0esr-1","78.14.0esr-1~deb10u1","78.14.0esr-1~deb11u1","78.14.0esr-1~deb9u1","78.15.0esr-1~deb10u1","78.15.0esr-1~deb11u1","78.15.0esr-1~deb9u1","91.0.1esr-1","91.0esr-1","91.1.0esr-1","91.10.0esr-1","91.10.0esr-1~deb10u1","91.10.0esr-1~deb11u1","91.10.0esr-1~deb9u1","91.11.0esr-1","91.11.0esr-1~deb10u1","91.11.0esr-1~deb11u1","91.11.0esr-1~deb9u1","91.12.0esr-1","91.12.0esr-1~deb10u1","91.12.0esr-1~deb11u1","91.13.0esr-1~deb10u1","91.13.0esr-1~deb11u1","91.2.0esr-1","91.3.0esr-1","91.3.0esr-2","91.4.0esr-1","91.4.1esr-1~deb11u1","91.4.1esr-1~deb9u1","91.5.0esr-1","91.5.0esr-1~deb10u1","91.5.0esr-1~deb11u1","91.5.0esr-1~deb9u1","91.5.1esr-1","91.6.0esr-1","91.6.0esr-1~deb10u1","91.6.0esr-1~deb11u1","91.6.0esr-1~deb9u1","91.6.1esr-1","91.6.1esr-1~deb10u1","91.6.1esr-1~deb11u1","91.6.1esr-1~deb9u1","91.7.0esr-1","91.7.0esr-1~deb10u1","91.7.0esr-1~deb11u1","91.7.0esr-1~deb9u1","91.8.0esr-1","91.8.0esr-1~deb10u1","91.8.0esr-1~deb11u1","91.8.0esr-1~deb9u1","91.9.0esr-1","91.9.0esr-1~deb10u1","91.9.0esr-1~deb11u1","91.9.0esr-1~deb9u1","91.9.1esr-1","91.9.1esr-1~deb10u1","91.9.1esr-1~deb11u1","91.9.1esr-1~deb9u1"],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0esr-1~deb12u1"}]}],"versions":["102.11.0esr-1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1"],"bundled":5},{"source":"osv","ecosystem":"Debian:11","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.15.0-1~deb11u1"}]}],"versions":["1:102.0.1-1","1:102.0.2-1","1:102.0~b4-1","1:102.0~b7-1","1:102.1.0-1","1:102.1.1-1","1:102.1.2-1","1:102.10.0-1","1:102.10.0-1~deb10u1","1:102.10.0-1~deb11u1","1:102.11.0-1","1:102.11.0-1~deb10u1","1:102.11.0-1~deb11u1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.2.0-1","1:102.2.1-1","1:102.2.2-1","1:102.3.0-1","1:102.3.0-1~deb10u1","1:102.3.0-1~deb11u1","1:102.3.1-1","1:102.3.2-1","1:102.3.3-1","1:102.4.0-1","1:102.4.0-1~deb10u1","1:102.4.0-1~deb11u1","1:102.4.1-1","1:102.5.0-1","1:102.5.0-1~deb10u1","1:102.5.0-1~deb11u1","1:102.5.1-1","1:102.6.0-1","1:102.6.0-1~deb10u1","1:102.6.0-1~deb11u1","1:102.7.1+1-1","1:102.7.1-1","1:102.7.2-1","1:102.8.0-1","1:102.8.0-1~deb10u1","1:102.8.0-1~deb11u1","1:102.9.0-1","1:102.9.0-1~deb10u1","1:102.9.0-1~deb11u1","1:102.9.1-1","1:78.12.0-1","1:78.13.0-1","1:78.13.0-1~deb10u1","1:78.13.0-1~deb11u1","1:78.13.0-1~deb9u1","1:78.14.0-1","1:78.14.0-1~deb10u1","1:78.14.0-1~deb11u1","1:78.14.0-1~deb9u1","1:84.0~b3-1","1:85.0~b3-1","1:86.0~b3-1","1:88.0~b2-1","1:89.0~b2-1","1:90.0~b2-1","1:91.0-1","1:91.0.2-1","1:91.0~b1-1","1:91.0~b3-1","1:91.0~b5-1","1:91.1.0-1","1:91.1.1-1","1:91.10.0-1","1:91.10.0-1~deb10u1","1:91.10.0-1~deb11u1","1:91.10.0-1~deb9u1","1:91.11.0-1","1:91.11.0-1~deb10u1","1:91.11.0-1~deb11u1","1:91.12.0-1~deb10u1","1:91.12.0-1~deb11u1","1:91.13.0-1~deb10u1","1:91.13.0-1~deb11u1","1:91.2.0-1","1:91.2.1-1","1:91.3.0-1","1:91.3.2-1","1:91.4.0-1","1:91.4.1-1","1:91.4.1-1~deb10u1","1:91.4.1-1~deb11u1","1:91.4.1-1~deb9u1","1:91.5.0-1","1:91.5.0-1~deb9u1","1:91.5.0-2","1:91.5.0-2~deb10u1","1:91.5.0-2~deb11u1","1:91.5.1-1","1:91.6.0-1","1:91.6.0-1~deb10u1","1:91.6.0-1~deb11u1","1:91.6.0-1~deb9u1","1:91.6.1-1","1:91.6.1-1~deb10u1","1:91.6.1-1~deb11u1","1:91.6.1-1~deb9u1","1:91.6.2-1","1:91.6.2-1~deb10u1","1:91.6.2-1~deb11u1","1:91.6.2-1~deb9u1","1:91.7.0-1","1:91.7.0-2","1:91.7.0-2~deb10u1","1:91.7.0-2~deb11u1","1:91.7.0-2~deb9u1","1:91.8.0-1","1:91.8.0-1~deb10u1","1:91.8.0-1~deb11u1","1:91.8.0-1~deb9u1","1:91.8.1-1","1:91.9.0-1","1:91.9.0-1~deb10u1","1:91.9.0-1~deb11u1","1:91.9.0-1~deb9u1"],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.15.0-1~deb12u1"}]}],"versions":["1:102.11.0-1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1"],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230720.00-1.mga8"}]}],"bundled":25},{"source":"osv","ecosystem":"Mageia:8","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.93.0-1.mga8"}]}],"bundled":25},{"source":"osv","ecosystem":"Mageia:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.1-1.mga8"}]}],"bundled":25},{"source":"osv","ecosystem":"Mageia:8","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.1-1.mga8"}]}],"bundled":25},{"source":"osv","ecosystem":"Mageia:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.1-1.mga8"}]}],"bundled":25},{"source":"osv","ecosystem":"Mageia:8","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.1-1.mga8"}]}],"bundled":25},{"source":"osv","ecosystem":"Mageia:9","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230720.00-1.mga9"}]}],"bundled":25},{"source":"osv","ecosystem":"Mageia:9","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.93.0-1.mga9"}]}],"bundled":25},{"source":"osv","ecosystem":"Mageia:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.1-1.mga9"}]}],"bundled":25},{"source":"osv","ecosystem":"Mageia:9","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.1-1.mga9"}]}],"bundled":25},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.2-1.mga9"}]}],"bundled":25},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.2-1.mga9"}]}],"bundled":25},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0-2.oe2203sp1"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0-2.oe2203sp2"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.0-2.oe2203"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.1-1.oe2403sp1"}]}],"bundled":37},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.1-1.oe2403sp3"}]}],"bundled":36},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.15.1-1.oe2403sp4"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el9_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el9_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el9_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el9_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el9_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el9_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el9_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.15.0-1.el8_8"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150200.152.102.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150200.152.102.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150200.152.102.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150200.152.102.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150200.152.102.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150200.152.102.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150200.152.102.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150200.152.102.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150200.152.102.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150200.152.102.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150200.152.102.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150200.152.102.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150200.152.102.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-112.176.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-112.176.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-112.176.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150000.150.100.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150000.150.100.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-150000.150.100.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.2-150200.8.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.2-150200.8.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.2-150200.8.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.2-150200.8.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.2-150200.8.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.2-150200.8.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.3.1-0ubuntu3","52.3.1-7fakesync1","52.8.1-0ubuntu0.18.04.1","52.9.1-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs38","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["38.8.0~repack1-0ubuntu1","38.8.0~repack1-0ubuntu3","38.8.0~repack1-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0+build2-0ubuntu0.20.04.1"}]}],"versions":["69.0.3+build1-0ubuntu1","70.0+build2-0ubuntu1","70.0+build2-0ubuntu2","70.0.1+build1-0ubuntu2","71.0+build2-0ubuntu2","71.0+build5-0ubuntu1","72.0.1+build1-0ubuntu1","72.0.2+build1-0ubuntu1","73.0+build1-0ubuntu1","73.0+build2-0ubuntu1","73.0+build3-0ubuntu1","73.0.1+build1-0ubuntu1","74.0+build1-0ubuntu1","74.0+build2-0ubuntu1","74.0+build2-0ubuntu2","74.0+build3-0ubuntu1","75.0+build3-0ubuntu1","76.0+build2-0ubuntu0.20.04.1","76.0.1+build1-0ubuntu0.20.04.1","77.0.1+build1-0ubuntu0.20.04.1","78.0.1+build1-0ubuntu0.20.04.1","78.0.2+build2-0ubuntu0.20.04.1","79.0+build1-0ubuntu0.20.04.1","80.0+build2-0ubuntu0.20.04.1","80.0.1+build1-0ubuntu0.20.04.1","81.0+build2-0ubuntu0.20.04.1","81.0.2+build1-0ubuntu0.20.04.1","82.0+build2-0ubuntu0.20.04.1","82.0.2+build1-0ubuntu0.20.04.1","82.0.3+build1-0ubuntu0.20.04.1","83.0+build2-0ubuntu0.20.04.1","84.0+build3-0ubuntu0.20.04.1","84.0.1+build1-0ubuntu0.20.04.1","84.0.2+build1-0ubuntu0.20.04.1","85.0+build1-0ubuntu0.20.04.1","85.0.1+build1-0ubuntu0.20.04.1","86.0+build3-0ubuntu0.20.04.1","86.0.1+build1-0ubuntu0.20.04.1","87.0+build3-0ubuntu0.20.04.2","88.0+build2-0ubuntu0.20.04.1","88.0.1+build1-0ubuntu0.20.04.2","89.0+build2-0ubuntu0.20.04.2","89.0.1+build1-0ubuntu0.20.04.1","89.0.2+build1-0ubuntu0.20.04.1","90.0+build1-0ubuntu0.20.04.1","90.0.2+build1-0ubuntu0.20.04.1","91.0+build2-0ubuntu0.20.04.1","91.0.1+build1-0ubuntu0.20.04.1","91.0.2+build1-0ubuntu0.20.04.1","92.0+build3-0ubuntu0.20.04.1","93.0+build1-0ubuntu0.20.04.1","94.0+build3-0ubuntu0.20.04.1","95.0+build1-0ubuntu0.20.04.1","95.0.1+build2-0ubuntu0.20.04.1","96.0+build2-0ubuntu0.20.04.1","97.0+build2-0ubuntu0.20.04.1","97.0.2+build1-0ubuntu0.20.04.1","98.0+build3-0ubuntu0.20.04.2","98.0.1+build2-0ubuntu0.20.04.1","98.0.2+build1-0ubuntu0.20.04.1","99.0+build2-0ubuntu0.20.04.2","100.0+build2-0ubuntu0.20.04.1","100.0.2+build1-0ubuntu0.20.04.1","101.0.1+build1-0ubuntu0.20.04.1","102.0+build2-0ubuntu0.20.04.1","103.0+build1-0ubuntu0.20.04.1","104.0+build3-0ubuntu0.20.04.1","105.0+build2-0ubuntu0.20.04.1","106.0.2+build1-0ubuntu0.20.04.1","106.0.5+build1-0ubuntu0.20.04.1","107.0+build2-0ubuntu0.20.04.1","108.0+build2-0ubuntu0.20.04.1","108.0.1+build1-0ubuntu0.20.04.1","108.0.2+build1-0ubuntu0.20.04.1","109.0+build2-0ubuntu0.20.04.1","109.0.1+build1-0ubuntu0.20.04.2","110.0+build3-0ubuntu0.20.04.1","110.0.1+build2-0ubuntu0.20.04.1","111.0+build2-0ubuntu0.20.04.1","111.0.1+build2-0ubuntu0.20.04.1","112.0+build2-0ubuntu0.20.04.1","112.0.1+build1-0ubuntu0.20.04.1","112.0.2+build1-0ubuntu0.20.04.1","113.0+build2-0ubuntu0.20.04.1","113.0.1+build1-0ubuntu0.20.04.1","113.0.2+build1-0ubuntu0.20.04.1","114.0+build3-0ubuntu0.20.04.1","114.0.1+build1-0ubuntu0.20.04.1","114.0.2+build1-0ubuntu0.20.04.1","115.0+build2-0ubuntu0.20.04.3","115.0.2+build1-0ubuntu0.20.04.1","116.0+build2-0ubuntu0.20.04.2","116.0.2+build1-0ubuntu0.20.04.1","116.0.3+build2-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.15.1+build1-0ubuntu0.20.04.1"}]}],"versions":["1:68.1.2+build1-0ubuntu1","1:68.1.2+build1-0ubuntu2","1:68.2.1+build1-0ubuntu1","1:68.2.2+build1-0ubuntu1","1:68.3.0+build2-0ubuntu1","1:68.3.1+build1-0ubuntu2","1:68.4.1+build1-0ubuntu1","1:68.4.2+build2-0ubuntu1","1:68.5.0+build1-0ubuntu1","1:68.6.0+build2-0ubuntu1","1:68.7.0+build1-0ubuntu1","1:68.7.0+build1-0ubuntu2","1:68.8.0+build2-0ubuntu0.20.04.2","1:68.10.0+build1-0ubuntu0.20.04.1","1:78.7.1+build1-0ubuntu0.20.04.1","1:78.8.1+build1-0ubuntu0.20.04.1","1:78.11.0+build1-0ubuntu0.20.04.2","1:78.13.0+build1-0ubuntu0.20.04.2","1:78.14.0+build1-0ubuntu0.20.04.1","1:78.14.0+build1-0ubuntu0.20.04.2","1:91.5.0+build1-0ubuntu0.20.04.1","1:91.7.0+build2-0ubuntu0.20.04.1","1:91.8.1+build1-0ubuntu0.20.04.1","1:91.9.1+build1-0ubuntu0.20.04.1","1:91.11.0+build2-0ubuntu0.20.04.1","1:102.2.2+build1-0ubuntu0.20.04.1","1:102.4.2+build2-0ubuntu0.20.04.1","1:102.7.1+build2-0ubuntu0.20.04.1","1:102.8.0+build2-0ubuntu0.20.04.1","1:102.9.0+build1-0ubuntu0.20.04.1","1:102.10.0+build2-0ubuntu0.20.04.1","1:102.11.0+build1-0ubuntu0.20.04.1","1:102.13.0+build1-0ubuntu0.20.04.1","1:102.15.0+build1-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs68","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["68.5.0-1~fakesync","68.5.0-2~fakesync","68.6.0-1","68.6.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.9.1-1build1","52.9.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.11.0-0ubuntu0.22.04.1","102.12.0-0ubuntu0.22.04.1","102.13.0-0ubuntu0.22.04.1","102.15.1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs78","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["78.13.0-1","78.15.0-2","78.15.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["91.5.1-0ubuntu1","91.6.0-1","91.6.0-2","91.7.0-2","91.10.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.15.1+build1-0ubuntu0.22.04.1"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1","1:102.8.0+build2-0ubuntu0.22.04.1","1:102.9.0+build1-0ubuntu0.22.04.1","1:102.10.0+build2-0ubuntu0.22.04.1","1:102.11.0+build1-0ubuntu0.22.04.1","1:102.13.0+build1-0ubuntu0.22.04.1","1:102.15.0+build1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.15.1-1","102.15.1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0+build2-0ubuntu0.20.04.1"}]}],"versions":["69.0.3+build1-0ubuntu1","70.0+build2-0ubuntu1","70.0+build2-0ubuntu2","70.0.1+build1-0ubuntu2","71.0+build2-0ubuntu2","71.0+build5-0ubuntu1","72.0.1+build1-0ubuntu1","72.0.2+build1-0ubuntu1","73.0+build1-0ubuntu1","73.0+build2-0ubuntu1","73.0+build3-0ubuntu1","73.0.1+build1-0ubuntu1","74.0+build1-0ubuntu1","74.0+build2-0ubuntu1","74.0+build2-0ubuntu2","74.0+build3-0ubuntu1","75.0+build3-0ubuntu1","76.0+build2-0ubuntu0.20.04.1","76.0.1+build1-0ubuntu0.20.04.1","77.0.1+build1-0ubuntu0.20.04.1","78.0.1+build1-0ubuntu0.20.04.1","78.0.2+build2-0ubuntu0.20.04.1","79.0+build1-0ubuntu0.20.04.1","80.0+build2-0ubuntu0.20.04.1","80.0.1+build1-0ubuntu0.20.04.1","81.0+build2-0ubuntu0.20.04.1","81.0.2+build1-0ubuntu0.20.04.1","82.0+build2-0ubuntu0.20.04.1","82.0.2+build1-0ubuntu0.20.04.1","82.0.3+build1-0ubuntu0.20.04.1","83.0+build2-0ubuntu0.20.04.1","84.0+build3-0ubuntu0.20.04.1","84.0.1+build1-0ubuntu0.20.04.1","84.0.2+build1-0ubuntu0.20.04.1","85.0+build1-0ubuntu0.20.04.1","85.0.1+build1-0ubuntu0.20.04.1","86.0+build3-0ubuntu0.20.04.1","86.0.1+build1-0ubuntu0.20.04.1","87.0+build3-0ubuntu0.20.04.2","88.0+build2-0ubuntu0.20.04.1","88.0.1+build1-0ubuntu0.20.04.2","89.0+build2-0ubuntu0.20.04.2","89.0.1+build1-0ubuntu0.20.04.1","89.0.2+build1-0ubuntu0.20.04.1","90.0+build1-0ubuntu0.20.04.1","90.0.2+build1-0ubuntu0.20.04.1","91.0+build2-0ubuntu0.20.04.1","91.0.1+build1-0ubuntu0.20.04.1","91.0.2+build1-0ubuntu0.20.04.1","92.0+build3-0ubuntu0.20.04.1","93.0+build1-0ubuntu0.20.04.1","94.0+build3-0ubuntu0.20.04.1","95.0+build1-0ubuntu0.20.04.1","95.0.1+build2-0ubuntu0.20.04.1","96.0+build2-0ubuntu0.20.04.1","97.0+build2-0ubuntu0.20.04.1","97.0.2+build1-0ubuntu0.20.04.1","98.0+build3-0ubuntu0.20.04.2","98.0.1+build2-0ubuntu0.20.04.1","98.0.2+build1-0ubuntu0.20.04.1","99.0+build2-0ubuntu0.20.04.2","100.0+build2-0ubuntu0.20.04.1","100.0.2+build1-0ubuntu0.20.04.1","101.0.1+build1-0ubuntu0.20.04.1","102.0+build2-0ubuntu0.20.04.1","103.0+build1-0ubuntu0.20.04.1","104.0+build3-0ubuntu0.20.04.1","105.0+build2-0ubuntu0.20.04.1","106.0.2+build1-0ubuntu0.20.04.1","106.0.5+build1-0ubuntu0.20.04.1","107.0+build2-0ubuntu0.20.04.1","108.0+build2-0ubuntu0.20.04.1","108.0.1+build1-0ubuntu0.20.04.1","108.0.2+build1-0ubuntu0.20.04.1","109.0+build2-0ubuntu0.20.04.1","109.0.1+build1-0ubuntu0.20.04.2","110.0+build3-0ubuntu0.20.04.1","110.0.1+build2-0ubuntu0.20.04.1","111.0+build2-0ubuntu0.20.04.1","111.0.1+build2-0ubuntu0.20.04.1","112.0+build2-0ubuntu0.20.04.1","112.0.1+build1-0ubuntu0.20.04.1","112.0.2+build1-0ubuntu0.20.04.1","113.0+build2-0ubuntu0.20.04.1","113.0.1+build1-0ubuntu0.20.04.1","113.0.2+build1-0ubuntu0.20.04.1","114.0+build3-0ubuntu0.20.04.1","114.0.1+build1-0ubuntu0.20.04.1","114.0.2+build1-0ubuntu0.20.04.1","115.0+build2-0ubuntu0.20.04.3","115.0.2+build1-0ubuntu0.20.04.1","116.0+build2-0ubuntu0.20.04.2","116.0.2+build1-0ubuntu0.20.04.1","116.0.3+build2-0ubuntu0.20.04.1"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.15.1+build1-0ubuntu0.20.04.1"}]}],"versions":["1:68.1.2+build1-0ubuntu1","1:68.1.2+build1-0ubuntu2","1:68.2.1+build1-0ubuntu1","1:68.2.2+build1-0ubuntu1","1:68.3.0+build2-0ubuntu1","1:68.3.1+build1-0ubuntu2","1:68.4.1+build1-0ubuntu1","1:68.4.2+build2-0ubuntu1","1:68.5.0+build1-0ubuntu1","1:68.6.0+build2-0ubuntu1","1:68.7.0+build1-0ubuntu1","1:68.7.0+build1-0ubuntu2","1:68.8.0+build2-0ubuntu0.20.04.2","1:68.10.0+build1-0ubuntu0.20.04.1","1:78.7.1+build1-0ubuntu0.20.04.1","1:78.8.1+build1-0ubuntu0.20.04.1","1:78.11.0+build1-0ubuntu0.20.04.2","1:78.13.0+build1-0ubuntu0.20.04.2","1:78.14.0+build1-0ubuntu0.20.04.1","1:78.14.0+build1-0ubuntu0.20.04.2","1:91.5.0+build1-0ubuntu0.20.04.1","1:91.7.0+build2-0ubuntu0.20.04.1","1:91.8.1+build1-0ubuntu0.20.04.1","1:91.9.1+build1-0ubuntu0.20.04.1","1:91.11.0+build2-0ubuntu0.20.04.1","1:102.2.2+build1-0ubuntu0.20.04.1","1:102.4.2+build2-0ubuntu0.20.04.1","1:102.7.1+build2-0ubuntu0.20.04.1","1:102.8.0+build2-0ubuntu0.20.04.1","1:102.9.0+build1-0ubuntu0.20.04.1","1:102.10.0+build2-0ubuntu0.20.04.1","1:102.11.0+build1-0ubuntu0.20.04.1","1:102.13.0+build1-0ubuntu0.20.04.1","1:102.15.0+build1-0ubuntu0.20.04.1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.15.1+build1-0ubuntu0.22.04.1"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1","1:102.8.0+build2-0ubuntu0.22.04.1","1:102.9.0+build1-0ubuntu0.22.04.1","1:102.10.0+build2-0ubuntu0.22.04.1","1:102.11.0+build1-0ubuntu0.22.04.1","1:102.13.0+build1-0ubuntu0.22.04.1","1:102.15.0+build1-0ubuntu0.22.04.1"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0-1.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.2.0-1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.5.1-1.1"}]}],"bundled":1860}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"firefox esr"},{"vendor":"mozilla","product":"firefox_esr"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1846688","tags":["x_transferred","Issue Tracking","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-34/","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-35/","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-36/","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-37/","tags":["x_transferred","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-38/","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4574","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-34"},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-35"},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-36"},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-37"},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-38"},{"url":"https://github.com/advisories/GHSA-hc92-m58j-m3m5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-4574","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4952","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4051","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4053","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4573","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4574","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4575","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4577","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4578","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4580","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4581","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4583","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4584","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4585","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236071","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236072","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236073","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236075","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236076","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236077","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236078","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236079","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236080","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236082","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236084","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236086","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-4952.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4954","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-4954.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4955","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-4955.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4958","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-4958.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1785560172.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0430","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0616","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1945","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23598","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23601","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25728","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25730","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25737","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25742","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28164","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29533","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29535","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29539","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32206","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32211","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4573","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4575","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4577","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4578","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4580","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50761","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50762","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5169","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5171","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5732","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6205","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6206","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6208","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6209","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6212","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6856","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6860","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6862","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6863","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6864","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0746","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10458","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10460","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10461","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10462","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10463","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10467","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10468","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11159","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11692","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11693","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11694","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11695","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11696","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11697","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11700","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11701","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11702","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11704","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11705","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11706","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1551","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1553","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2608","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2609","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2610","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2611","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2612","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2614","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2616","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3302","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3852","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3864","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4767","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4768","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4769","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4770","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4777","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5688","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5690","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5691","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5693","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5696","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5700","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6600","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6601","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6604","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6606","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6608","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6609","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6610","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6611","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6612","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6613","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6614","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6615","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7521","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7525","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7526","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7527","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7529","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8394","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9392","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9393","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9394","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9396","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9397","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9399","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9400","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9401","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0237","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0238","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0239","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0240","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0241","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0242","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0247","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0510","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1009","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1012","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1014","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1015","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1018","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1019","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10527","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10528","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10529","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10532","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10533","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11709","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11712","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11713","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11714","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14329","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14331","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1931","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1932","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1933","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1934","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1935","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1936","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1937","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1938","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1942","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26695","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26696","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3028","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3029","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3030","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3031","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5262","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5986","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8027","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8028","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8029","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8030","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8031","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8034","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8035","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8036","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8037","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9179","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9181","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9182","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9184","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9185","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0818","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0879","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0882","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0883","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0885","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0886","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0887","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0890","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12289","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12302","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12306","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12324","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12325","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2447","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2769","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2772","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2773","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2774","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2779","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2782","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2787","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2788","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2789","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2790","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3889","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4371","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4692","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4694","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4718","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4721","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5731","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8092","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8094","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-4574","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0266.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32258","tags":["report"]},{"url":"https://www.mozilla.org/en-US/firefox/115.0.1/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/firefox/115.0.2/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-26/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/firefox/115.0.3/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/firefox/115.1.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-31/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/firefox/115.2.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/","tags":["advisory"]},{"url":"https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_93.html","tags":["web"]},{"url":"https://firefox-source-docs.mozilla.org/security/nss/releases/index.html","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/115.0/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/115.0.1/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-27/","tags":["advisory"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/115.1.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-33/","tags":["advisory"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/115.1.1/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/115.2.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-38/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/firefox/115.2.1/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/115.2.1/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/115.2.2/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4863","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1712","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1715","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3213","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1999","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32205","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32212","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32213","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32215","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34414","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34416","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37201","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37202","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37208","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37211","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4045","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4046","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4055","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4056","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3214","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3215","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4945","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236071","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236082","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236086","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4945.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4051","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4051","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/#CVE-2023-4051","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4053","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/#CVE-2023-4053","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4573","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/#CVE-2023-4573","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4574","tags":["advisory","report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/#CVE-2023-4574","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4575","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/#CVE-2023-4575","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4577","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/#CVE-2023-4577","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4578","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/#CVE-2023-4578","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4580","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/#CVE-2023-4580","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4581","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/#CVE-2023-4581","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4583","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4583","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/#CVE-2023-4583","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4584","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/#CVE-2023-4584","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4585","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4585","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/#CVE-2023-4585","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4946","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4946.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4947","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4947.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4948","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4948.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4949","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4949.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4950","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4950.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4951","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4951.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4952.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4954.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4955.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4956","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4956.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4957","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4957.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4958.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4959","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4959.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5019","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5019.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:4952","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:4954","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233519-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214606","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4585","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233559-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233562-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213746","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233664-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1215231","tags":["report"]},{"url":"https://bugzilla.suse.com/1215245","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4863","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-4574","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6320-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6368-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-4573","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4577","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4578","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4579","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4584","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4863","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4057","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-6077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-24000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-24001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-24002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-30547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-29943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-29944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9680","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-4574","title":"Memory corruption in IPC ColorPickerShownCallback","description":"When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u003c 117, Firefox ESR \u003c 102.15, Firefox ESR \u003c 115.2, Thunderbird \u003c 102.15, and Thunderbird \u003c 115.2.","status":"published","published":"2023-09-11T08:00:40.693Z","modified":"2025-12-18T15:23:01.885Z","updated_at":"2026-11-02T14:35:30.116696Z"}],"euvd":[{"id":"EUVD-2023-54428","description":"When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u003c 117, Firefox ESR \u003c 102.15, Firefox ESR \u003c 115.2, Thunderbird \u003c 102.15, and Thunderbird \u003c 115.2.","status":"published","published":"2023-09-11T08:00:40Z","modified":"2025-12-18T15:23:01Z","updated_at":"2026-11-02T19:49:03.071772Z"}],"ghsa":[{"id":"GHSA-hc92-m58j-m3m5","title":"When creating a callback over IPC for showing the Color Picker window, multiple of the same...","description":"When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u003c 117, Firefox ESR \u003c 102.15, Firefox ESR \u003c 115.2, and Thunderbird \u003c 115.2.","status":"published","published":"2023-09-11T09:31:44Z","modified":"2024-04-04T07:34:46Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:56:52.639328Z"}],"nvd":[{"id":"CVE-2023-4574","description":"When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u003c 117, Firefox ESR \u003c 102.15, Firefox ESR \u003c 115.2, Thunderbird \u003c 102.15, and Thunderbird \u003c 115.2.","status":"published","published":"2023-09-11T09:15:09.087Z","modified":"2026-06-17T06:38:07.9Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:08:28.268644Z"}],"osv":[{"id":"ALPINE-CVE-2023-4574","description":"When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u003c 117, Firefox ESR \u003c 102.15, Firefox ESR \u003c 115.2, Thunderbird \u003c 102.15, and Thunderbird \u003c 115.2.","status":"published","published":"2023-09-11T09:15:09.087Z","modified":"2026-11-03T06:32:43.614810944Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"CVE-2023-4574","description":"When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u003c 117, Firefox ESR \u003c 102.15, Firefox ESR \u003c 115.2, Thunderbird \u003c 102.15, and Thunderbird \u003c 115.2.","status":"published","published":"2023-09-11T09:15:09.087Z","modified":"2026-07-01T12:48:22.348212252Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:34.287121Z"},{"id":"DEBIAN-CVE-2023-4574","description":"When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u003c 117, Firefox ESR \u003c 102.15, Firefox ESR \u003c 115.2, Thunderbird \u003c 102.15, and Thunderbird \u003c 115.2.","status":"published","published":"2023-09-11T09:15:09.087Z","modified":"2026-10-26T18:02:58.50272663Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"OESA-2023-1711","title":"firefox security update","description":"Mozilla Firefox is a standalone web browser, designed for standards compliance and performance.  Its functionality can be enhanced via a plethora of extensions.\r\n\r\nSecurity Fix(es):\r\n\r\nWhen receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4573)\r\n\r\nWhen creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4574)\r\n\r\nWhen creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4575)\r\n\r\nExcel `.xll` add-in files did not have a blocklist entry in Firefox\u0026apos;s executable blocklist which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4581)\r\n\r\nMemory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4584)\r\n\r\nHeap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)(CVE-2023-4863)","status":"published","published":"2023-10-13T11:06:09Z","modified":"2026-08-18T01:17:54.262784239Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1712","title":"firefox security update","description":"Mozilla Firefox is a standalone web browser, designed for standards compliance and performance.  Its functionality can be enhanced via a plethora of extensions.\r\n\r\nSecurity Fix(es):\r\n\r\nWhen receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4573)\r\n\r\nWhen creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4574)\r\n\r\nWhen creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4575)\r\n\r\nExcel `.xll` add-in files did not have a blocklist entry in Firefox\u0026apos;s executable blocklist which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4581)\r\n\r\nMemory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4584)\r\n\r\nHeap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)(CVE-2023-4863)","status":"published","published":"2023-10-13T11:06:09Z","modified":"2026-08-18T01:17:53.837128804Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1715","title":"firefox security update","description":"Mozilla Firefox is a standalone web browser, designed for standards compliance and performance.  Its functionality can be enhanced via a plethora of extensions.\r\n\r\nSecurity Fix(es):\r\n\r\nWhen receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4573)\r\n\r\nWhen creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4574)\r\n\r\nWhen creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4575)\r\n\r\nExcel `.xll` add-in files did not have a blocklist entry in Firefox\u0026apos;s executable blocklist which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4581)\r\n\r\nMemory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4584)\r\n\r\nHeap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)(CVE-2023-4863)","status":"published","published":"2023-10-13T11:06:09Z","modified":"2026-08-18T01:17:00.218921705Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2026-3213","title":"mozjs102 security update","description":"SpiderMonkey is the code-name for Mozilla Firefox\u0026amp;apos;s C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript.\r\n\r\nSecurity Fix(es):\n\nUnexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u0026lt; 102.10 and Firefox ESR \u0026lt; 102.10.(CVE-2023-1945)\n\nThere exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.(CVE-2023-1999)\n\nA website could have obscured the fullscreen notification by using a combination of \u0026lt;code\u0026gt;window.open\u0026lt;/code\u0026gt;, fullscreen requests, \u0026lt;code\u0026gt;window.name\u0026lt;/code\u0026gt; assignments, and \u0026lt;code\u0026gt;setInterval\u0026lt;/code\u0026gt; calls. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29533)\n\nFollowing a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29535)\n\nAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29536)\n\nWhen handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29539)\n\nFirefox did not properly handle downloads of files ending in \u0026lt;code\u0026gt;.desktop\u0026lt;/code\u0026gt;, which can be interpreted to run attacker-controlled commands. \u0026lt;br\u0026gt;*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29541)\n\nA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29548)\n\nMemory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29550)\n\nIn multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32205)\n\nAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32206)\n\nA missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32207)\n\nA type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32211)\n\nAn attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32212)\n\nWhen reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32213)\n\nMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112 and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32215)\n\nThe error page for sites with invalid TLS certificates was missing the\nactivation-delay Firefox uses to protect prompts and permission dialogs\nfrom attacks that exploit human response time delays. If a malicious\npage elicited user clicks in precise locations immediately before\nnavigating to a site with a certificate error and made the renderer\nextremely busy at the same time, it could create a gap between when\nthe error page was loaded and when the display actually refreshed.\nWith the right timing the elicited clicks could land in that gap and \nactivate the button that overrides the certificate error for that site. This vulnerability affects Firefox ESR \u0026lt; 102.12, Firefox \u0026lt; 114, and Thunderbird \u0026lt; 102.12.(CVE-2023-34414)\n\nMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR \u0026lt; 102.12, Firefox \u0026lt; 114, and Thunderbird \u0026lt; 102.12.(CVE-2023-34416)\n\nAn attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37201)\n\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37202)\n\nA website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37207)\n\nWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37208)\n\nMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37211)\n\nOffscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4045)\n\nIn some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4046)\n\nA bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4047)\n\nAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4048)\n\nRace conditions in reference counting code were found through code inspection. These could have resulted in potentially exploitable use-after-free vulnerabilities. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4049)\n\nIn some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could have led to a sandbox escape. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4050)\n\nWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie jar state. This could have caused requests to be sent with some cookies missing. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4055)\n\nMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4056)\n\nWhen receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4573)\n\nWhen creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4574)\n\nWhen creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4575)\n\nExcel `.xll` add-in files did not have a blocklist entry in Firefox\u0026apos;s executable blocklist which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4581)\n\nMemory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4584)\n\nHeap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)(CVE-2023-4863)","status":"published","published":"2026-08-01T11:12:05Z","modified":"2026-08-18T01:21:25.970630414Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3214","title":"mozjs102 security update","description":"SpiderMonkey is the code-name for Mozilla Firefox\u0026amp;apos;s C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript.\r\n\r\nSecurity Fix(es):\n\nUnexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u0026lt; 102.10 and Firefox ESR \u0026lt; 102.10.(CVE-2023-1945)\n\nThere exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.(CVE-2023-1999)\n\nA website could have obscured the fullscreen notification by using a combination of \u0026lt;code\u0026gt;window.open\u0026lt;/code\u0026gt;, fullscreen requests, \u0026lt;code\u0026gt;window.name\u0026lt;/code\u0026gt; assignments, and \u0026lt;code\u0026gt;setInterval\u0026lt;/code\u0026gt; calls. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29533)\n\nFollowing a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29535)\n\nAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29536)\n\nWhen handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29539)\n\nFirefox did not properly handle downloads of files ending in \u0026lt;code\u0026gt;.desktop\u0026lt;/code\u0026gt;, which can be interpreted to run attacker-controlled commands. \u0026lt;br\u0026gt;*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29541)\n\nA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29548)\n\nMemory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29550)\n\nIn multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32205)\n\nAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32206)\n\nA missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32207)\n\nA type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32211)\n\nAn attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32212)\n\nWhen reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32213)\n\nMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112 and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32215)\n\nThe error page for sites with invalid TLS certificates was missing the\nactivation-delay Firefox uses to protect prompts and permission dialogs\nfrom attacks that exploit human response time delays. If a malicious\npage elicited user clicks in precise locations immediately before\nnavigating to a site with a certificate error and made the renderer\nextremely busy at the same time, it could create a gap between when\nthe error page was loaded and when the display actually refreshed.\nWith the right timing the elicited clicks could land in that gap and \nactivate the button that overrides the certificate error for that site. This vulnerability affects Firefox ESR \u0026lt; 102.12, Firefox \u0026lt; 114, and Thunderbird \u0026lt; 102.12.(CVE-2023-34414)\n\nMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR \u0026lt; 102.12, Firefox \u0026lt; 114, and Thunderbird \u0026lt; 102.12.(CVE-2023-34416)\n\nAn attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37201)\n\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37202)\n\nA website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37207)\n\nWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37208)\n\nMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37211)\n\nOffscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4045)\n\nIn some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4046)\n\nA bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4047)\n\nAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4048)\n\nRace conditions in reference counting code were found through code inspection. These could have resulted in potentially exploitable use-after-free vulnerabilities. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4049)\n\nIn some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could have led to a sandbox escape. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4050)\n\nWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie jar state. This could have caused requests to be sent with some cookies missing. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4055)\n\nMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4056)\n\nWhen receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4573)\n\nWhen creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4574)\n\nWhen creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4575)\n\nExcel `.xll` add-in files did not have a blocklist entry in Firefox\u0026apos;s executable blocklist which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4581)\n\nMemory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4584)","status":"published","published":"2026-08-01T11:12:05Z","modified":"2026-08-18T01:21:25.962449061Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3215","title":"mozjs102 security update","description":"SpiderMonkey is the code-name for Mozilla Firefox\u0026amp;apos;s C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript.\r\n\r\nSecurity Fix(es):\n\nUnexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u0026lt; 102.10 and Firefox ESR \u0026lt; 102.10.(CVE-2023-1945)\n\nThere exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.(CVE-2023-1999)\n\nA website could have obscured the fullscreen notification by using a combination of \u0026lt;code\u0026gt;window.open\u0026lt;/code\u0026gt;, fullscreen requests, \u0026lt;code\u0026gt;window.name\u0026lt;/code\u0026gt; assignments, and \u0026lt;code\u0026gt;setInterval\u0026lt;/code\u0026gt; calls. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29533)\n\nFollowing a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29535)\n\nAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29536)\n\nWhen handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29539)\n\nFirefox did not properly handle downloads of files ending in \u0026lt;code\u0026gt;.desktop\u0026lt;/code\u0026gt;, which can be interpreted to run attacker-controlled commands. \u0026lt;br\u0026gt;*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29541)\n\nA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29548)\n\nMemory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 112, Focus for Android \u0026lt; 112, Firefox ESR \u0026lt; 102.10, Firefox for Android \u0026lt; 112, and Thunderbird \u0026lt; 102.10.(CVE-2023-29550)\n\nIn multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32205)\n\nAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32206)\n\nA missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32207)\n\nA type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32211)\n\nAn attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32212)\n\nWhen reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32213)\n\nMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112 and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 113, Firefox ESR \u0026lt; 102.11, and Thunderbird \u0026lt; 102.11.(CVE-2023-32215)\n\nThe error page for sites with invalid TLS certificates was missing the\nactivation-delay Firefox uses to protect prompts and permission dialogs\nfrom attacks that exploit human response time delays. If a malicious\npage elicited user clicks in precise locations immediately before\nnavigating to a site with a certificate error and made the renderer\nextremely busy at the same time, it could create a gap between when\nthe error page was loaded and when the display actually refreshed.\nWith the right timing the elicited clicks could land in that gap and \nactivate the button that overrides the certificate error for that site. This vulnerability affects Firefox ESR \u0026lt; 102.12, Firefox \u0026lt; 114, and Thunderbird \u0026lt; 102.12.(CVE-2023-34414)\n\nMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR \u0026lt; 102.12, Firefox \u0026lt; 114, and Thunderbird \u0026lt; 102.12.(CVE-2023-34416)\n\nAn attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37201)\n\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37202)\n\nA website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37207)\n\nWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37208)\n\nMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 115, Firefox ESR \u0026lt; 102.13, and Thunderbird \u0026lt; 102.13.(CVE-2023-37211)\n\nOffscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4045)\n\nIn some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4046)\n\nA bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4047)\n\nAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4048)\n\nRace conditions in reference counting code were found through code inspection. These could have resulted in potentially exploitable use-after-free vulnerabilities. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4049)\n\nIn some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could have led to a sandbox escape. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4050)\n\nWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie jar state. This could have caused requests to be sent with some cookies missing. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4055)\n\nMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 102.14, and Firefox ESR \u0026lt; 115.1.(CVE-2023-4056)\n\nWhen receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4573)\n\nWhen creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4574)\n\nWhen creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4575)\n\nExcel `.xll` add-in files did not have a blocklist entry in Firefox\u0026apos;s executable blocklist which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4581)\n\nMemory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 102.15, Firefox ESR \u0026lt; 115.2, Thunderbird \u0026lt; 102.15, and Thunderbird \u0026lt; 115.2.(CVE-2023-4584)","status":"published","published":"2026-08-01T11:12:05Z","modified":"2026-08-18T01:21:25.265732115Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"RHSA-2023:4945","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T12:54:24Z","modified":"2026-06-26T11:06:49Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4946","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T12:54:53Z","modified":"2025-11-22T12:55:04Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4947","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T12:54:43Z","modified":"2025-11-22T12:55:04Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4948","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T12:54:33Z","modified":"2025-11-22T12:55:05Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4949","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T12:53:47Z","modified":"2025-11-22T12:55:05Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4950","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T12:54:05Z","modified":"2025-11-22T12:55:06Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4951","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T12:53:38Z","modified":"2025-11-22T12:55:07Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4952","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T12:54:15Z","modified":"2025-11-22T12:55:07Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4954","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T12:53:56Z","modified":"2025-11-22T12:55:08Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4955","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T12:55:02Z","modified":"2025-11-22T12:55:08Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4956","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T12:54:18Z","modified":"2025-11-22T12:55:09Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4957","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T12:54:09Z","modified":"2025-11-22T12:55:09Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4958","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T12:53:50Z","modified":"2025-11-22T12:55:10Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4959","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T12:53:59Z","modified":"2025-11-22T12:55:11Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:5019","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T12:54:27Z","modified":"2026-06-26T11:06:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RLSA-2023:4952","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.15.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573)\n\n* Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574)\n\n* Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575)\n\n* Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577)\n\n* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584)\n\n* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585)\n\n* Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051)\n\n* Mozilla: Full screen notification obscured by external program (CVE-2023-4053)\n\n* Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578)\n\n* Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580)\n\n* Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581)\n\n* Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-10-06T22:57:16.242717Z","modified":"2026-02-04T12:00:08.252057Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2023:4954","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.15.0.\n\nSecurity Fix(es):\n\n* Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573)\n\n* Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574)\n\n* Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575)\n\n* Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577)\n\n* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584)\n\n* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585)\n\n* Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051)\n\n* Mozilla: Full screen notification obscured by external program (CVE-2023-4053)\n\n* Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578)\n\n* Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580)\n\n* Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581)\n\n* Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-10-06T22:57:16.242717Z","modified":"2026-02-04T08:30:16.39787Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2023-4574","description":"When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox \u003c 117, Firefox ESR \u003c 102.15, Firefox ESR \u003c 115.2, Thunderbird \u003c 102.15, and Thunderbird \u003c 115.2.","status":"published","published":"2023-08-30T00:00:00Z","modified":"2026-04-22T14:13:19.742992Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2023:4952","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.15.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573)\n* Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574)\n* Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575)\n* Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577)\n* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584)\n* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585)\n* Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051)\n* Mozilla: Full screen notification obscured by external program (CVE-2023-4053)\n* Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578)\n* Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580)\n* Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581)\n* Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-04T00:00:00Z","modified":"2026-10-29T11:02:19.277276195Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:4954","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.15.0.\n\nSecurity Fix(es):\n\n* Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573)\n* Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574)\n* Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575)\n* Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577)\n* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584)\n* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585)\n* Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051)\n* Mozilla: Full screen notification obscured by external program (CVE-2023-4053)\n* Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578)\n* Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580)\n* Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581)\n* Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-04T00:00:00Z","modified":"2026-10-29T11:02:19.252020706Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:4955","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.15.0.\n\nSecurity Fix(es):\n\n* Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573)\n* Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574)\n* Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575)\n* Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577)\n* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584)\n* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585)\n* Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051)\n* Mozilla: Full screen notification obscured by external program (CVE-2023-4053)\n* Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578)\n* Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580)\n* Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581)\n* Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-04T00:00:00Z","modified":"2026-10-29T11:31:29.719146089Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:4958","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.15.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573)\n* Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574)\n* Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575)\n* Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577)\n* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584)\n* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585)\n* Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051)\n* Mozilla: Full screen notification obscured by external program (CVE-2023-4053)\n* Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578)\n* Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580)\n* Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581)\n* Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-04T00:00:00Z","modified":"2026-10-29T11:31:30.95628908Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2026-1785560172","title":"thunderbird: Fix of 255 CVEs","description":"- rebase from Thunderbird 115.4.1 to 140.12.0 ESR\n\n- CVE-2022-3032: When receiving an HTML email that contained an iframe\n  element, which used a srcdoc attribute to define the inner HTML document,\n  remote objects specified in the nested document, for example images or\n  videos, were not blocked\n\n- CVE-2023-0430: Certificate OCSP revocation status was not checked when\n  verifying S/Mime signatures\n\n- CVE-2023-0547: OCSP revocation status of recipient certificates was not\n  checked when sending S/Mime encrypted email, and revoked certificates\n  would be accepted\n\n- CVE-2023-0616: If a MIME email combines OpenPGP and OpenPGP MIME data in a\n  certain way Thunderbird repeatedly attempts to process and display the\n  message, which could cause Thunderbird's user interface to lock up and no\n  longer respond to the user's actions\n\n- CVE-2023-1945: Unexpected data returned from the Safe Browsing API could\n  have led to memory corruption and a potentially exploitable crash\n\n- CVE-2023-4573: When receiving rendering data over IPC `mStream` could have\n  been destroyed when initialized, which could have led to a use-after-free\n  causing a potentially exploitable crash\n\n- CVE-2023-4574: When creating a callback over IPC for showing the Color\n  Picker window, multiple of the same callbacks could have been created at a\n  time and eventually all simultaneously destroyed as soon as one of the\n  callbacks finished\n\n- CVE-2023-4575: When creating a callback over IPC for showing the File\n  Picker window, multiple of the same callbacks could have been created at a\n  time and eventually all simultaneously destroyed as soon as one of the\n  callbacks finished\n\n- CVE-2023-4577: When `UpdateRegExpStatics` attempted to access\n  `initialStringHeap` it could already have been garbage collected prior to\n  entering the function, which could potentially have led to an exploitable\n  crash\n\n- CVE-2023-4578: When calling `JS::CheckRegExpSyntax` a Syntax Error could\n  have been set which would end in calling `convertToRuntimeErrorAndClear`.\n  A path in the function could attempt to allocate memory when none is\n  available which would have caused a newly created Out of Memory exception\n  to be mishandled as a Syntax Error\n\n- CVE-2023-4580: Push notifications stored on disk in private browsing mode\n  were not being encrypted potentially allowing the leak of sensitive\n  information\n\n- CVE-2023-4581: Excel `.xll` add-in files did not have a blocklist entry in\n  Firefox's executable blocklist which allowed them to be downloaded without\n  any warning of their potential harm\n\n- CVE-2023-5169: A compromised content process could have provided malicious\n  data in a `PathRecording` resulting in an out-of-bounds write, leading to\n  a potentially exploitable crash in a privileged process\n\n- CVE-2023-5171: During Ion compilation, a Garbage Collection could have\n  resulted in a use-after-free condition, allowing an attacker to write two\n  NUL bytes, and cause a potentially exploitable crash\n\n- CVE-2023-5724: Drivers are not always robust to extremely large draw calls\n  and in some cases this scenario could have led to a crash\n\n- CVE-2023-5725: A malicious installed WebExtension could open arbitrary\n  URLs, which under the right circumstance could be leveraged to collect\n  sensitive user data\n\n- CVE-2023-5732: An attacker could have created a malicious link using\n  bidirectional characters to spoof the location in the address bar when\n  visited\n\n- CVE-2023-6204: On some systems—depending on the graphics settings and\n  drivers—it was possible to force an out-of-bounds read and leak memory\n  data into the images created on the canvas element\n\n- CVE-2023-6205: It was possible to cause the use of a MessagePort after it\n  had already been freed, which could potentially have led to an exploitable\n  crash\n\n- CVE-2023-6206: The black fade animation when exiting fullscreen is roughly\n  the length of the anti-clickjacking delay on permission prompts\n\n- CVE-2023-6207: Ownership mismanagement led to a use-after-free in\n  ReadableByteStreams This vulnerability affects Firefox \u003c 120, Firefox ESR\n  \u003c 115.5.0, and Thunderbird \u003c 115.5\n\n- CVE-2023-6208: When using X11, text selected by the page using the\n  Selection API was erroneously copied into the primary selection, a\n  temporary storage not unlike the clipboard\n\n- CVE-2023-6209: Relative URLs starting with three slashes were incorrectly\n  parsed, and a path-traversal \"/../\" part in the path could be used to\n  override the specified host\n\n- CVE-2023-6212: Memory safety bugs present in Firefox 119, Firefox ESR\n  115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory\n  corruption and we presume that with enough effort some of these could have\n  been exploited to run arbitrary code\n\n- CVE-2023-6856: The WebGL `DrawElementsInstanced` method was susceptible to\n  a heap buffer overflow when used on systems with the Mesa VM driver\n\n- CVE-2023-6857: When resolving a symlink, a race may occur where the buffer\n  passed to `readlink` may actually be smaller than necessary\n\n- CVE-2023-6859: A use-after-free condition affected TLS socket creation\n  when under memory pressure\n\n- CVE-2023-6860: The `VideoBridge` allowed any content process to use\n  textures produced by remote decoders\n\n- CVE-2023-6862: A use-after-free was identified in the\n  `nsDNSService::Init`. This issue appears to manifest rarely during start-\n  up\n\n- CVE-2023-6863: The `ShutdownObserver()` was susceptible to potentially\n  undefined behavior due to its reliance on a dynamic type that lacked a\n  virtual destructor\n\n- CVE-2023-6864: Memory safety bugs present in Firefox 120, Firefox ESR\n  115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory\n  corruption and we presume that with enough effort some of these could have\n  been exploited to run arbitrary code\n\n- CVE-2023-23598: Due to the Firefox GTK wrapper code's use of text/plain\n  for drag data and GTK treating all text/plain MIMEs containing file URLs\n  as being dragged a website could arbitrarily read a file via a call to\n  `DataTransfer.setData`. This vulnerability affects Firefox \u003c 109, Firefox\n  ESR \u003c 102.7, and Thunderbird \u003c 102.7\n\n- CVE-2023-23599: When copying a network request from the developer tools\n  panel as a curl command the output was not being properly sanitized and\n  could allow arbitrary commands to be hidden within\n\n- CVE-2023-23601: Navigations were being allowed when dragging a URL from a\n  cross-origin iframe into the same tab which could lead to website spoofing\n  attacks This vulnerability affects Firefox \u003c 109, Firefox ESR \u003c 102.7, and\n  Thunderbird \u003c 102.7\n\n- CVE-2023-23602: A mishandled security check when creating a WebSocket in a\n  WebWorker caused the Content Security Policy connect-src header to be\n  ignored\n\n- CVE-2023-25728: The Content-Security-Policy-Report-Only header could allow\n  an attacker to leak a child iframe's unredacted URI when interaction with\n  that iframe triggers a redirect\n\n- CVE-2023-25730: A background script invoking requestFullscreen and then\n  blocking the main thread could force the browser into fullscreen mode\n  indefinitely, resulting in potential user confusion or spoofing attacks\n\n- CVE-2023-25737: An invalid downcast from nsTextNode to SVGElement could\n  have lead to undefined behavior\n\n- CVE-2023-25742: When importing a SPKI RSA public key as ECDSA P-256, the\n  key would be handled incorrectly causing the tab to crash\n\n- CVE-2023-25751: Sometimes, when invalidating JIT code while following an\n  iterator, the newly generated code could be overwritten incorrectly\n\n- CVE-2023-25752: When accessing throttled streams, the count of available\n  bytes needed to be checked in the calling function to be within bounds\n\n- CVE-2023-28164: Dragging a URL from a cross-origin iframe that was removed\n  during the drag could have led to user confusion and website spoofing\n  attacks\n\n- CVE-2023-29533: A website could have obscured the fullscreen notification\n  by using a combination of window.open, fullscreen requests, window.name\n  assignments, and setInterval calls\n\n- CVE-2023-29535: Following a Garbage Collector compaction, weak maps may\n  have been accessed before they were correctly traced\n\n- CVE-2023-29536: An attacker could cause the memory manager to incorrectly\n  free a pointer that addresses attacker-controlled memory, resulting in an\n  assertion, memory corruption, or a potentially exploitable crash\n\n- CVE-2023-29539: When handling the filename directive in the Content-\n  Disposition header, the filename would be truncated if the filename\n  contained a NULL character\n\n- CVE-2023-29548: A wrong lowering instruction in the ARM64 Ion compiler\n  resulted in a wrong optimization result\n\n- CVE-2023-32206: An out-of-bound read could have led to a crash in the\n  RLBox Expat driver\n\n- CVE-2023-32211: A type checking bug would have led to invalid code being\n  compiled\n\n- CVE-2023-37207: A website could have obscured the fullscreen notification\n  by using a URL with a scheme handled by an external program, such as a\n  mailto URL. This could have led to user confusion and possible spoofing\n  attacks\n\n- CVE-2023-50761: The signature of a digitally signed S/MIME email message\n  may optionally specify the signature creation date and time\n\n- CVE-2023-50762: When processing a PGP/MIME payload that contains digitally\n  signed text, the first paragraph of the text was never shown to the user\n\n- CVE-2024-0746: A Linux user opening the print preview dialog could have\n  caused the browser to crash\n\n- CVE-2024-0750: A bug in popup notifications delay calculation could have\n  made it possible for an attacker to trick a user into granting permissions\n\n- CVE-2024-0751: A malicious devtools extension could have been used to\n  escalate privileges\n\n- CVE-2024-1546: When storing and re-accessing data on a networking channel,\n  the length of buffers may have been confused, resulting in an out-of-\n  bounds memory read\n\n- CVE-2024-1547: Through a series of API calls and redirects, an attacker-\n  controlled alert dialog could have been displayed on another website (with\n  the victim website's URL shown). This vulnerability affects Firefox \u003c 123,\n  Firefox ESR \u003c 115.8, and Thunderbird \u003c 115.8\n\n- CVE-2024-1548: A website could have obscured the fullscreen notification\n  by using a dropdown select input element\n\n- CVE-2024-1549: If a website set a large custom cursor, portions of the\n  cursor could have overlapped with the permission dialog, potentially\n  resulting in user confusion and unexpected granted permissions\n\n- CVE-2024-1550: A malicious website could have used a combination of\n  exiting fullscreen mode and `requestPointerLock` to cause the user's mouse\n  to be re-positioned unexpectedly, which could have led to user confusion\n  and inadvertently granting permissions they did not intend to grant\n\n- CVE-2024-1551: Set-Cookie response headers were being incorrectly honored\n  in multipart HTTP responses\n\n- CVE-2024-1553: Memory safety bugs present in Firefox 122, Firefox ESR\n  115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory\n  corruption and we presume that with enough effort some of these could have\n  been exploited to run arbitrary code\n\n- CVE-2024-2608: `AppendEncodedAttributeValue(),\n  ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could\n  have experienced integer overflows, causing underallocation of an output\n  buffer leading to an out of bounds write\n\n- CVE-2024-2609: The permission prompt input delay could expire while the\n  window is not in focus\n\n- CVE-2024-2610: Using a markup injection an attacker could have stolen\n  nonce values\n\n- CVE-2024-2611: A missing delay on when pointer lock was used could have\n  allowed a malicious page to trick a user into granting permissions\n\n- CVE-2024-2612: If an attacker could find a way to trigger a particular\n  code path in `SafeRefPtr`, it could have triggered a crash or potentially\n  be leveraged to achieve code execution\n\n- CVE-2024-2614: Memory safety bugs present in Firefox 123, Firefox ESR\n  115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory\n  corruption and we presume that with enough effort some of these could have\n  been exploited to run arbitrary code\n\n- CVE-2024-2616: To harden ICU against exploitation, the behavior for out-\n  of-memory conditions was changed to crash instead of attempt to continue\n\n- CVE-2024-3302: There was no limit to the number of HTTP/2 CONTINUATION\n  frames that would be processed\n\n- CVE-2024-3852: GetBoundName could return the wrong version of an object\n  when JIT optimizations were applied\n\n- CVE-2024-3857: The JIT created incorrect code for arguments in certain\n  cases\n\n- CVE-2024-3859: On 32-bit versions there were integer-overflows that led to\n  an out-of-bounds-read that potentially could be triggered by a malformed\n  OpenType font\n\n- CVE-2024-3861: If an AlignedBuffer were assigned to itself, the subsequent\n  self-move could result in an incorrect reference count and later use-\n  after-free\n\n- CVE-2024-3864: Memory safety bug present in Firefox 124, Firefox ESR\n  115.9, and Thunderbird 115.9. This bug showed evidence of memory\n  corruption and we presume that with enough effort this could have been\n  exploited to run arbitrary code\n\n- CVE-2024-4767: If the `browser.privatebrowsing.autostart` preference is\n  enabled, IndexedDB files were not properly deleted when the window was\n  closed\n\n- CVE-2024-4768: A bug in popup notifications' interaction with WebAuthn\n  made it easier for an attacker to trick a user into granting permissions\n\n- CVE-2024-4769: When importing resources using Web Workers, error messages\n  would distinguish the difference between `application/javascript`\n  responses and non-script responses\n\n- CVE-2024-4770: When saving a page to PDF, certain font styles could have\n  led to a potential use-after-free crash\n\n- CVE-2024-4777: Memory safety bugs present in Firefox 125, Firefox ESR\n  115.10, and Thunderbird 115.10. Some of these bugs showed evidence of\n  memory corruption and we presume that with enough effort some of these\n  could have been exploited to run arbitrary code\n\n- CVE-2024-5688: If a garbage collection was triggered at the right time, a\n  use-after-free could have occurred during object transplant\n\n- CVE-2024-5690: By monitoring the time certain operations take, an attacker\n  could have guessed which external protocol handlers were functional on a\n  user's system\n\n- CVE-2024-5691: By tricking the browser with a `X-Frame-Options` header, a\n  sandboxed iframe could have presented a button that, if clicked by a user,\n  would bypass restrictions to open a new window\n\n- CVE-2024-5693: Offscreen Canvas did not properly track cross-origin\n  tainting, which could be used to access image data from another site in\n  violation of same-origin policy\n\n- CVE-2024-5696: By manipulating the text in an `\u0026lt;input\u0026gt;` tag, an\n  attacker could have caused corrupt memory leading to a potentially\n  exploitable crash\n\n- CVE-2024-5700: Memory safety bugs present in Firefox 126, Firefox ESR\n  115.11, and Thunderbird 115.11. Some of these bugs showed evidence of\n  memory corruption and we presume that with enough effort some of these\n  could have been exploited to run arbitrary code\n\n- CVE-2024-6600: Due to large allocation checks in Angle for GLSL shaders\n  being too lenient an out-of-bounds access could occur when allocating more\n  than 8192 ints in private shader memory on macOS. This vulnerability\n  affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and\n  Thunderbird \u003c 128\n\n- CVE-2024-6601: A race condition could lead to a cross-origin container\n  obtaining permissions of the top-level origin\n\n- CVE-2024-6602: A mismatch between allocator and deallocator could have led\n  to memory corruption\n\n- CVE-2024-6603: In an out-of-memory scenario an allocation could fail but\n  free would have been called on the pointer afterwards leading to memory\n  corruption\n\n- CVE-2024-6604: Memory safety bugs present in Firefox 127, Firefox ESR\n  115.12, and Thunderbird 115.12. Some of these bugs showed evidence of\n  memory corruption and we presume that with enough effort some of these\n  could have been exploited to run arbitrary code\n\n- CVE-2024-6606: Clipboard code failed to check the index on an array access\n\n- CVE-2024-6607: It was possible to prevent a user from exiting pointerlock\n  when pressing escape and to overlay customValidity notifications from a\n  `\u0026lt;select\u0026gt;` element over certain permission prompts\n\n- CVE-2024-6608: It was possible to move the cursor using pointerlock from\n  an iframe\n\n- CVE-2024-6609: When almost out-of-memory an elliptic curve key which was\n  never allocated could have been freed again\n\n- CVE-2024-6610: Form validation popups could capture escape key presses\n\n- CVE-2024-6611: A nested iframe, triggering a cross-site navigation, could\n  send SameSite=Strict or Lax cookies\n\n- CVE-2024-6612: CSP violations generated links in the console tab of the\n  developer tools, pointing to the violating resource\n\n- CVE-2024-6613: The frame iterator could get stuck in a loop when\n  encountering certain wasm frames leading to incorrect stack traces\n\n- CVE-2024-6614: The frame iterator could get stuck in a loop when\n  encountering certain wasm frames leading to incorrect stack traces\n\n- CVE-2024-7518: Select options could obscure the fullscreen notification\n  dialog\n\n- CVE-2024-7521: Incomplete WebAssembly exception handing could have led to\n  a use-after-free\n\n- CVE-2024-7522: Editor code failed to check an attribute value\n\n- CVE-2024-7525: It was possible for a web extension with minimal\n  permissions to create a `StreamFilter` which could be used to read and\n  modify the response body of requests on any site\n\n- CVE-2024-7526: ANGLE failed to initialize parameters which lead to reading\n  from uninitialized memory\n\n- CVE-2024-7527: Unexpected marking work at the start of sweeping could have\n  led to a use-after-free\n\n- CVE-2024-7529: The date picker could partially obscure security prompts\n\n- CVE-2024-7652: An error in the ECMA-262 specification relating to Async\n  Generators could have resulted in a type confusion, potentially leading to\n  memory corruption and an exploitable crash\n\n- CVE-2024-8394: When aborting the verification of an OTR chat session, an\n  attacker could have caused a use-after-free bug leading to a potentially\n  exploitable crash\n\n- CVE-2024-9392: A compromised content process could have allowed for the\n  arbitrary loading of cross-origin pages\n\n- CVE-2024-9393: An attacker could, via a specially crafted multipart\n  response, execute arbitrary JavaScript under the `resource://pdf.js`\n  origin\n\n- CVE-2024-9394: An attacker could, via a specially crafted multipart\n  response, execute arbitrary JavaScript under the `resource://devtools`\n  origin\n\n- CVE-2024-9396: It is currently unknown if this issue is exploitable but a\n  condition may arise where the structured clone of certain objects could\n  lead to memory corruption\n\n- CVE-2024-9397: A missing delay in directory upload UI could have made it\n  possible for an attacker to trick a user into granting permission via\n  clickjacking\n\n- CVE-2024-9398: By checking the result of calls to `window.open` with\n  specifically set protocol handlers, an attacker could determine if the\n  application which implements that protocol handler is installed\n\n- CVE-2024-9399: A website configured to initiate a specially crafted\n  WebTransport session could crash the Firefox process leading to a denial\n  of service condition\n\n- CVE-2024-9400: A potential memory corruption vulnerability could be\n  triggered if an attacker had the ability to trigger an OOM at a specific\n  moment during JIT compilation\n\n- CVE-2024-9401: Memory safety bugs present in Firefox 130, Firefox ESR\n  115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs\n  showed evidence of memory corruption and we presume that with enough\n  effort some of these could have been exploited to run arbitrary code\n\n- CVE-2024-10458: A permission leak could have occurred from a trusted site\n  to an untrusted site via `embed` or `object` elements\n\n- CVE-2024-10459: An attacker could have caused a use-after-free when\n  accessibility was enabled, leading to a potentially exploitable crash\n\n- CVE-2024-10460: The origin of an external protocol handler prompt could\n  have been obscured using a data: URL within an `iframe`. This\n  vulnerability affects Firefox \u003c 132, Firefox ESR \u003c 128.4, Thunderbird \u003c\n  128.4, and Thunderbird \u003c 132\n\n- CVE-2024-10461: In multipart/x-mixed-replace responses, `Content-\n  Disposition: attachment` in the response header was not respected and did\n  not force a download, which could allow XSS attacks\n\n- CVE-2024-10462: Truncation of a long URL could have allowed origin\n  spoofing in a permission prompt\n\n- CVE-2024-10463: Video frames could have been leaked between origins in\n  some situations\n\n- CVE-2024-10464: Repeated writes to history interface attributes could have\n  been used to cause a Denial of Service condition in the browser\n\n- CVE-2024-10465: A clipboard \"paste\" button could persist across tabs which\n  allowed a spoofing attack\n\n- CVE-2024-10466: By sending a specially crafted push message, a remote\n  server could have hung the parent process, causing the browser to become\n  unresponsive\n\n- CVE-2024-10467: Memory safety bugs present in Firefox 131, Firefox ESR\n  128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory\n  corruption and we presume that with enough effort some of these could have\n  been exploited to run arbitrary code\n\n- CVE-2024-10468: Potential race conditions in IndexedDB could have caused\n  memory corruption, leading to a potentially exploitable crash\n\n- CVE-2024-11159: Using remote content in OpenPGP encrypted messages can\n  lead to the disclosure of plaintext\n\n- CVE-2024-11692: An attacker could cause a select dropdown to be shown over\n  another tab; this could have led to user confusion and possible spoofing\n  attacks\n\n- CVE-2024-11693: The executable file warning was not presented when\n  downloading .library-ms files\n\n- CVE-2024-11694: Enhanced Tracking Protection's Strict mode may have\n  inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through\n  the Google SafeFrame shim in the Web Compatibility extension\n\n- CVE-2024-11695: A crafted URL containing Arabic script and whitespace\n  characters could have hidden the true origin of the page, resulting in a\n  potential spoofing attack\n\n- CVE-2024-11696: The application failed to account for exceptions thrown by\n  the `loadManifestFromFile` method during add-on signature verification\n\n- CVE-2024-11697: When handling keypress events, an attacker may have been\n  able to trick a user into bypassing the \"Open Executable File?\"\n  confirmation dialog\n\n- CVE-2024-11700: Malicious websites may have been able to perform user\n  intent confirmation through tapjacking\n\n- CVE-2024-11701: The incorrect domain may have been displayed in the\n  address bar during an interrupted navigation attempt\n\n- CVE-2024-11702: Copying sensitive information from Private Browsing tabs\n  on Android, such as passwords, may have inadvertently stored data in the\n  cloud-based clipboard history if enabled\n\n- CVE-2024-11704: A double-free issue could have occurred in\n  `sec_pkcs7_decoder_start_decrypt()` when handling an error path\n\n- CVE-2024-11705: `NSC_DeriveKey` inadvertently assumed that the `phKey`\n  parameter is always non-NULL. When it was passed as NULL, a segmentation\n  fault (SEGV) occurred, leading to crashes\n\n- CVE-2024-11706: A null pointer dereference may have inadvertently occurred\n  in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function,\n  when handling malformed or improperly formatted input files\n\n- CVE-2024-11708: Missing thread synchronization primitives could have led\n  to a data race on members of the PlaybackParams structure\n\n- CVE-2025-0237: The WebChannel API, which is used to transport various\n  information across processes, did not check the sending principal but\n  rather accepted the principal being sent. This could have led to privilege\n  escalation attacks\n\n- CVE-2025-0238: Assuming a controlled failed memory allocation, an attacker\n  could have caused a use-after-free, leading to a potentially exploitable\n  crash\n\n- CVE-2025-0239: When using Alt-Svc, ALPN did not properly validate\n  certificates when the original server is redirecting to an insecure site\n\n- CVE-2025-0240: Parsing a JavaScript module as JSON could, under some\n  circumstances, cause cross-compartment access, which may result in a use-\n  after-free\n\n- CVE-2025-0241: When segmenting specially crafted text, segmentation would\n  corrupt memory leading to a potentially exploitable crash\n\n- CVE-2025-0242: Memory safety bugs present in Firefox 133, Thunderbird 133,\n  Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird\n  128.5. Some of these bugs showed evidence of memory corruption and we\n  presume that with enough effort some of these could have been exploited to\n  run arbitrary code\n\n- CVE-2025-0247: Memory safety bugs present in Firefox 133 and Thunderbird\n  133. Some of these bugs showed evidence of memory corruption and we\n  presume that with enough effort some of these could have been exploited to\n  run arbitrary code\n\n- CVE-2025-0510: Thunderbird displayed an incorrect sender address if the\n  From field of an email used the invalid group name syntax that is\n  described in CVE-2024-49040\n\n- CVE-2025-1009: An attacker could have caused a use-after-free via crafted\n  XSLT data, leading to a potentially exploitable crash\n\n- CVE-2025-1010: An attacker could have caused a use-after-free via the\n  Custom Highlight API, leading to a potentially exploitable crash\n\n- CVE-2025-1012: A race during concurrent delazification could have led to a\n  use-after-free\n\n- CVE-2025-1013: A race condition could have led to private browsing tabs\n  being opened in normal browsing windows. This could have resulted in a\n  potential privacy leak\n\n- CVE-2025-1014: Certificate length was not properly checked when added to a\n  certificate store. In practice only trusted data was processed\n\n- CVE-2025-1015: The Thunderbird Address Book URI fields contained\n  unsanitized links. This could be used by an attacker to create and export\n  an address book containing a malicious payload in a field. For example, in\n  the “Other” field of the Instant Messaging section. If another user\n  imported the address book, clicking on the link could result in opening a\n  web page inside Thunderbird, and that page could execute (unprivileged)\n  JavaScript\n\n- CVE-2025-1016: Memory safety bugs present in Firefox 134, Thunderbird 134,\n  Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird\n  128.6. Some of these bugs showed evidence of memory corruption and we\n  presume that with enough effort some of these could have been exploited to\n  run arbitrary code\n\n- CVE-2025-1018: The fullscreen notification is prematurely hidden when\n  fullscreen is re-requested quickly by the user. This could have been\n  leveraged to perform a potential spoofing attack\n\n- CVE-2025-1019: The z-order of the browser windows could be manipulated to\n  hide the fullscreen notification. This could potentially be leveraged to\n  perform a spoofing attack\n\n- CVE-2025-1931: It was possible to cause a use-after-free in the content\n  process side of a WebTransport connection, leading to a potentially\n  exploitable crash\n\n- CVE-2025-1932: An inconsistent comparator in xslt/txNodeSorter could have\n  resulted in potentially exploitable out-of-bounds access. Only affected\n  version 122 and later\n\n- CVE-2025-1933: On 64-bit CPUs, when the JIT compiles WASM i32 return\n  values they can pick up bits from left over memory. This can potentially\n  cause them to be treated as a different type\n\n- CVE-2025-1934: It was possible to interrupt the processing of a RegExp\n  bailout and run additional JavaScript, potentially triggering garbage\n  collection when the engine was not expecting it\n\n- CVE-2025-1935: A web page could trick a user into setting that site as the\n  default handler for a custom URL protocol\n\n- CVE-2025-1936: URLs retrieve local file content packaged in a ZIP archive.\n  The null and everything after it was ignored when retrieving the content\n  from the archive, but the fake extension after the null was used to\n  determine the type of content. This could have been used to hide code in a\n  web extension disguised as something else like an image\n\n- CVE-2025-1937: Memory safety bugs present in Firefox 135, Thunderbird 135,\n  Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of\n  these bugs showed evidence of memory corruption and we presume that with\n  enough effort some of these could have been exploited to run arbitrary\n  code\n\n- CVE-2025-1938: Memory safety bugs present in Firefox 135, Thunderbird 135,\n  Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed\n  evidence of memory corruption and we presume that with enough effort some\n  of these could have been exploited to run arbitrary code\n\n- CVE-2025-1942: When String.toUpperCase() caused a string to get longer it\n  was possible for uninitialized memory to be incorporated into the result\n  string\n\n- CVE-2025-3028: JavaScript code running while transforming a document with\n  the XSLTProcessor could lead to a use-after-free\n\n- CVE-2025-3029: A crafted URL containing specific Unicode characters could\n  have hidden the true origin of the page, resulting in a potential spoofing\n  attack\n\n- CVE-2025-3030: Memory safety bugs present in Firefox 136, Thunderbird 136,\n  Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed\n  evidence of memory corruption and we presume that with enough effort some\n  of these could have been exploited to run arbitrary code\n\n- CVE-2025-3031: An attacker could read 32 bits of values spilled onto the\n  stack in a JIT compiled function\n\n- CVE-2025-3032: Leaking of file descriptors from the fork server to web\n  content processes could allow for privilege escalation attacks\n\n- CVE-2025-3033: This bug only affects Firefox on Windows. Other operating\n  systems are unaffected.*\n\n- CVE-2025-5262: A double-free could have occurred in\n  `vpx_codec_enc_init_multi` after a failed allocation when initializing the\n  encoder for WebRTC. This could have caused memory corruption and a\n  potentially exploitable crash\n\n- CVE-2025-5986: A crafted HTML email using mailbox:/// links can trigger\n  automatic, unsolicited downloads of .pdf files to the user's desktop or\n  home directory without prompting, even if auto-saving is disabled. This\n  behavior can be abused to fill the disk with garbage data (e.g. using\n  /dev/urandom on Linux) or to leak Windows credentials via SMB links when\n  the email is viewed in HTML mode. While user interaction is required to\n  download the .pdf file, visual obfuscation can conceal the download\n  trigger. Viewing the email in HTML mode is enough to load external content\n\n- CVE-2025-8027: On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the\n  64-bit return value space on the stack. Baseline-JIT, however, read the\n  entire 64 bits\n\n- CVE-2025-8028: On arm64, a WASM `br_table` instruction with a lot of\n  entries could lead to the label being too far from the instruction causing\n  truncation and incorrect computation of the branch address\n\n- CVE-2025-8029: Thunderbird executed `javascript:` URLs when used in\n  `object` and `embed` tags\n\n- CVE-2025-8030: Insufficient escaping in the “Copy as cURL” feature could\n  potentially be used to trick a user into executing unexpected code\n\n- CVE-2025-8031: The `username:password` part was not correctly stripped\n  from URLs in CSP reports potentially leaking HTTP Basic Authentication\n  credentials\n\n- CVE-2025-8032: XSLT document loading did not correctly propagate the\n  source document which bypassed its CSP\n\n- CVE-2025-8033: The JavaScript engine did not handle closed generators\n  correctly and it was possible to resume them leading to a nullptr deref\n\n- CVE-2025-8034: Memory safety bugs present in Firefox ESR 115.25, Firefox\n  ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR\n  140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence\n  of memory corruption and we presume that with enough effort some of these\n  could have been exploited to run arbitrary code\n\n- CVE-2025-8035: Memory safety bugs present in Firefox ESR 128.12,\n  Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox\n  140 and Thunderbird 140. Some of these bugs showed evidence of memory\n  corruption and we presume that with enough effort some of these could have\n  been exploited to run arbitrary code\n\n- CVE-2025-8036: Thunderbird cached CORS preflight responses across IP\n  address changes. This allowed circumventing CORS with DNS rebinding\n\n- CVE-2025-8037: Setting a nameless cookie with an equals sign in the value\n  shadowed other cookies. Even if the nameless cookie was set over HTTP and\n  the shadowed cookie included the `Secure` attribute\n\n- CVE-2025-9179: An attacker was able to perform memory corruption in the\n  GMP process which processes encrypted media. This process is also heavily\n  sandboxed, but represents slightly different privileges from the content\n  process\n\n- CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D\n  component\n\n- CVE-2025-9181: Uninitialized memory in the JavaScript Engine component\n\n- CVE-2025-9182: Denial-of-service due to out-of-memory in the Graphics:\n  WebRender component\n\n- CVE-2025-9184: Memory safety bugs present in Firefox ESR 140.1,\n  Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs\n  showed evidence of memory corruption and we presume that with enough\n  effort some of these could have been exploited to run arbitrary code\n\n- CVE-2025-9185: Memory safety bugs present in Firefox ESR 115.26, Firefox\n  ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR\n  140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence\n  of memory corruption and we presume that with enough effort some of these\n  could have been exploited to run arbitrary code\n\n- CVE-2025-10527: Sandbox escape due to use-after-free in the Graphics:\n  Canvas2D component\n\n- CVE-2025-10528: Sandbox escape due to undefined behavior, invalid pointer\n  in the Graphics: Canvas2D component\n\n- CVE-2025-10529: Same-origin policy bypass in the Layout component\n\n- CVE-2025-10532: Incorrect boundary conditions in the JavaScript: GC\n  component\n\n- CVE-2025-10533: Integer overflow in the SVG component\n\n- CVE-2025-10536: Information disclosure in the Networking: Cache component\n\n- CVE-2025-11708: Use-after-free in MediaTrackGraphImpl::GetInstance()\n\n- CVE-2025-11709: A compromised web process was able to trigger out of\n  bounds reads and writes in a more privileged process using manipulated\n  WebGL textures\n\n- CVE-2025-11710: A compromised web process using malicious IPC messages\n  could have caused the privileged browser process to reveal blocks of its\n  memory to the compromised process\n\n- CVE-2025-11711: There was a way to change the value of JavaScript Object\n  properties that were supposed to be non-writeable\n\n- CVE-2025-11712: A malicious page could have used the type attribute of an\n  OBJECT tag to override the default browser behavior when encountering a\n  web resource served without a content-type. This could have contributed to\n  an XSS on a site that unsafely serves files without a content-type header\n\n- CVE-2025-11713: Insufficient escaping in the “Copy as cURL” feature could\n  have been used to trick a user into executing unexpected code on Windows.\n  This did not affect the application when running on other operating\n  systems\n\n- CVE-2025-11714: Memory safety bugs present in Firefox ESR 115.28, Firefox\n  ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of\n  these bugs showed evidence of memory corruption and we presume that with\n  enough effort some of these could have been exploited to run arbitrary\n  code\n\n- CVE-2025-14322: Sandbox escape due to incorrect boundary conditions in the\n  Graphics: CanvasWebGL component\n\n- CVE-2025-14323: Privilege escalation in the DOM: Notifications component\n\n- CVE-2025-14328: Privilege escalation in the Netmonitor component\n\n- CVE-2025-14329: Privilege escalation in the Netmonitor component\n\n- CVE-2025-14331: Same-origin policy bypass in the Request Handling\n  component\n\n- CVE-2025-26695: When requesting an OpenPGP key from a WKD server, an\n  incorrect padding size was used and a network observer could have learned\n  the length of the requested email address\n\n- CVE-2025-26696: Certain crafted MIME email messages that claimed to\n  contain an encrypted OpenPGP message, which instead contained an OpenPGP\n  signed message, were wrongly shown as being encrypted\n\n- CVE-2026-0818: When a user explicitly requested Thunderbird to decrypt an\n  inline OpenPGP message that was embedded in a text section of an email\n  that was formatted and styled with HTML and CSS, then the decrypted\n  contents were rendered in a context in which the CSS styles from the outer\n  messages were active. If the user had additionally allowed loading of the\n  remote content referenced by the outer email message, and the email was\n  crafted by the sender using a combination of CSS rules and fonts and\n  animations, then it was possible to extract the secret contents of the\n  email\n\n- CVE-2026-0879: Sandbox escape due to incorrect boundary conditions in the\n  Graphics component\n\n- CVE-2026-0882: Use-after-free in the IPC component\n\n- CVE-2026-0883: Information disclosure in the Networking component\n\n- CVE-2026-0884: Use-after-free in the JavaScript Engine component\n\n- CVE-2026-0885: Use-after-free in the JavaScript: GC component\n\n- CVE-2026-0886: Incorrect boundary conditions in the Graphics component\n\n- CVE-2026-0887: Clickjacking issue, information disclosure in the PDF\n  Viewer component\n\n- CVE-2026-0890: Spoofing issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop\n  component\n\n- CVE-2026-2447: Heap buffer overflow in libvpx\n\n- CVE-2026-2769: Use-after-free in the Storage: IndexedDB component\n\n- CVE-2026-2772: Use-after-free in the Audio/Video: Playback component\n\n- CVE-2026-2773: Incorrect boundary conditions in the Web Audio component\n\n- CVE-2026-2774: Integer overflow in the Audio/Video component\n\n- CVE-2026-2779: Incorrect boundary conditions in the Networking: JAR\n  component\n\n- CVE-2026-2782: Privilege escalation in the Netmonitor component\n\n- CVE-2026-2786: Use-after-free in the JavaScript Engine component\n\n- CVE-2026-2787: Use-after-free in the DOM: Window and Location component\n\n- CVE-2026-2788: Incorrect boundary conditions in the Audio/Video: GMP\n  component\n\n- CVE-2026-2789: Use-after-free in the Graphics: ImageLib component\n\n- CVE-2026-2790: Same-origin policy bypass in the Networking: JAR component\n\n- CVE-2026-3889: Spoofing issue in Thunderbird\n\n- CVE-2026-4371: A malicious mail server could send malformed strings with\n  negative lengths, causing the parser to read memory outside the buffer. If\n  a mail server or connection to a mail server were compromised, an attacker\n  could cause the parser to malfunction, potentially crashing Thunderbird or\n  leaking sensitive data\n\n- CVE-2026-4692: Sandbox escape in the Responsive Design Mode component\n\n- CVE-2026-4694: Incorrect boundary conditions, integer overflow in the\n  Graphics component\n\n- CVE-2026-4710: Incorrect boundary conditions in the Audio/Video component\n\n- CVE-2026-4718: Undefined behavior in the WebRTC: Signaling component\n\n- CVE-2026-4721: Memory safety bugs present in Firefox ESR 115.33, Firefox\n  ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of\n  these bugs showed evidence of memory corruption and we presume that with\n  enough effort some of these could have been exploited to run arbitrary\n  code\n\n- CVE-2026-5731: Memory safety bugs present in Firefox ESR 115.34.0, Firefox\n  ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird\n  149.0.1. Some of these bugs showed evidence of memory corruption and we\n  presume that with enough effort some of these could have been exploited to\n  run arbitrary code\n\n- CVE-2026-8090: Use-after-free in the DOM: Networking component\n\n- CVE-2026-8091: Incorrect boundary conditions in the Audio/Video: Playback\n  component\n\n- CVE-2026-8092: Memory safety bugs present in Firefox ESR 115.35.1, Firefox\n  ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of\n  memory corruption and we presume that with enough effort some of these\n  could have been exploited to run arbitrary code\n\n- CVE-2026-8094: Other issue in the WebRTC component\n\n- CVE-2026-12289: Privilege escalation in the Graphics: WebRender component\n\n- CVE-2026-12305: Memory safety bug fixed in Firefox 152\n\n- CVE-2026-12306: Memory safety bug fixed in Firefox 152\n\n- CVE-2026-12309: Memory safety bug fixed in Firefox 152\n\n- CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL\n  component","status":"published","published":"2026-10-22T00:35:08Z","modified":"2026-10-26T09:43:20.435238821Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"DLA-3553-1","title":"firefox-esr - security update","status":"published","published":"2023-09-01T00:00:00Z","modified":"2026-03-09T01:18:46.321001Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-3554-1","title":"thunderbird - security update","status":"published","published":"2023-09-05T00:00:00Z","modified":"2026-03-09T01:23:28.253874Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5485-1","title":"firefox-esr - security update","status":"published","published":"2023-08-30T00:00:00Z","modified":"2026-03-09T02:08:42.83126Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"DSA-5488-1","title":"thunderbird - security update","status":"published","published":"2023-09-03T00:00:00Z","modified":"2026-03-09T02:08:55.205855Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2023-0266","title":"Updated firefox/thunderbird packages fix security vulnerability","description":"Use-after-free in workers. (CVE-2023-3600)\n\nFile Extension Spoofing using the Text Direction Override Character.\n(CVE-2023-3417)\n\nOffscreen Canvas could have bypassed cross-origin restrictions.\n(CVE-2023-4045)\n\nIncorrect value used during WASM compilation. (CVE-2023-4046)\n\nPotential permissions request bypass via clickjacking. (CVE-2023-4047)\n\nCrash in DOMParser due to out-of-memory conditions. (CVE-2023-4048)\n\nFix potential race conditions when releasing platform objects.\n(CVE-2023-4049)\n\nStack buffer overflow in StorageManager. (CVE-2023-4050)\n\nCookie jar overflow caused unexpected cookie jar state. (CVE-2023-4055)\n\nMemory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR\n102.14, Thunderbird 115.1, and Thunderbird 102.14. (CVE-2023-4056)\n\nMemory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and\nThunderbird 115.1. (CVE-2023-4057)\n\nMemory corruption in IPC CanvasTranslator. (CVE-2023-4573)\n\nMemory corruption in IPC ColorPickerShownCallback. (CVE-2023-4574)\n\nMemory corruption in IPC FilePickerShownCallback. (CVE-2023-4575)\n\nInteger Overflow in RecordedSourceSurfaceCreation. (CVE-2023-4576)\n\nMemory corruption in JIT UpdateRegExpStatics. (CVE-2023-4577)\n\nFull screen notification obscured by file open dialog. (CVE-2023-4051)\n\nError reporting methods in SpiderMonkey could have triggered an Out of\nMemory Exception. (CVE-2023-4578)\n\nFull screen notification obscured by external program. (CVE-2023-4053)\n\nPush notifications saved to disk unencrypted. (CVE-2023-4580)\n\nXLL file extensions were downloadable without warnings. (CVE-2023-4581)\n\nBrowsing Context potentially not cleared when closing Private Window.\n(CVE-2023-4583)\n\nMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR\n115.2, Thunderbird 102.15, and Thunderbird 115.2. (CVE-2023-4584)\n\nMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and\nThunderbird 115.2. (CVE-2023-4585)\n\nHeap buffer overflow in libwebp. (CVE-2023-4863)\n","status":"published","published":"2023-09-24T22:16:18Z","modified":"2026-04-16T04:41:02.744328295Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:13176-1","title":"MozillaFirefox-117.0-1.1 on GA media","description":"These are all security issues fixed in the MozillaFirefox-117.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:37:52.281059Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:13196-1","title":"libmozjs-102-0-102.15.0-1.1 on GA media","description":"These are all security issues fixed in the libmozjs-102-0-102.15.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:23:18.038844Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:13197-1","title":"libmozjs-115-0-115.2.0-1.1 on GA media","description":"These are all security issues fixed in the libmozjs-115-0-115.2.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:23:20.479287Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:13202-1","title":"MozillaThunderbird-115.2.0-1.1 on GA media","description":"These are all security issues fixed in the MozillaThunderbird-115.2.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:01:11.548408Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:14572-1","title":"firefox-esr-128.5.1-1.1 on GA media","description":"These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-12-12T00:00:00Z","modified":"2026-02-04T02:21:21.150439Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2023:3519-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nFirefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606).\n\n- CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688)\n- CVE-2023-4575: Fixed memory corruption in IPC FilePickerShownCallback  (bmo#1846689)\n- CVE-2023-4576: Fixed integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694)\n- CVE-2023-4577: Fixed memory corruption in JIT UpdateRegExpStatics (bmo#1847397)\n- CVE-2023-4051: Fixed full screen notification obscured by file open dialog (bmo#1821884)\n- CVE-2023-4578: Fixed Out of Memory Exception in SpiderMonkey could have triggered an (bmo#1839007)\n- CVE-2023-4053: Fixed full screen notification obscured by external program (bmo#1839079)\n- CVE-2023-4580: Fixed push notifications saved to disk unencrypted (bmo#1843046)\n- CVE-2023-4581: Fixed XLL file extensions downloadable without warnings (bmo#1843758)\n- CVE-2023-4582: Fixed buffer Overflow in WebGL glGetProgramiv (bmo#1773874)\n- CVE-2023-4583: Fixed browsing Context potentially not cleared when closing Private Window (bmo#1842030)\n- CVE-2023-4584: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2  (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)\n- CVE-2023-4585: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2(bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999).\n","status":"published","published":"2023-09-05T06:28:35Z","modified":"2026-02-04T02:22:53.59227Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3559-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nFirefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606).\n\n- CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688)\n- CVE-2023-4575: Fixed memory corruption in IPC FilePickerShownCallback  (bmo#1846689)\n- CVE-2023-4576: Fixed integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694)\n- CVE-2023-4577: Fixed memory corruption in JIT UpdateRegExpStatics (bmo#1847397)\n- CVE-2023-4051: Fixed full screen notification obscured by file open dialog (bmo#1821884)\n- CVE-2023-4578: Fixed Out of Memory Exception in SpiderMonkey could have triggered an (bmo#1839007)\n- CVE-2023-4053: Fixed full screen notification obscured by external program (bmo#1839079)\n- CVE-2023-4580: Fixed push notifications saved to disk unencrypted (bmo#1843046)\n- CVE-2023-4581: Fixed XLL file extensions downloadable without warnings (bmo#1843758)\n- CVE-2023-4582: Fixed buffer Overflow in WebGL glGetProgramiv (bmo#1773874)\n- CVE-2023-4583: Fixed browsing Context potentially not cleared when closing Private Window (bmo#1842030)\n- CVE-2023-4584: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2  (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)\n- CVE-2023-4585: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2(bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999).\n","status":"published","published":"2023-09-08T12:48:42Z","modified":"2026-02-04T03:14:52.474278Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3562-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nFirefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606).\n\n- CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688)\n- CVE-2023-4575: Fixed memory corruption in IPC FilePickerShownCallback  (bmo#1846689)\n- CVE-2023-4576: Fixed integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694)\n- CVE-2023-4577: Fixed memory corruption in JIT UpdateRegExpStatics (bmo#1847397)\n- CVE-2023-4051: Fixed full screen notification obscured by file open dialog (bmo#1821884)\n- CVE-2023-4578: Fixed Out of Memory Exception in SpiderMonkey could have triggered an (bmo#1839007)\n- CVE-2023-4053: Fixed full screen notification obscured by external program (bmo#1839079)\n- CVE-2023-4580: Fixed push notifications saved to disk unencrypted (bmo#1843046)\n- CVE-2023-4581: Fixed XLL file extensions downloadable without warnings (bmo#1843758)\n- CVE-2023-4582: Fixed buffer Overflow in WebGL glGetProgramiv (bmo#1773874)\n- CVE-2023-4583: Fixed browsing Context potentially not cleared when closing Private Window (bmo#1842030)\n- CVE-2023-4584: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2  (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)\n- CVE-2023-4585: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2(bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999).\n","status":"published","published":"2023-09-08T13:04:29Z","modified":"2026-02-04T03:11:16.258768Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3664-1","title":"Security update for MozillaThunderbird","description":"This update for MozillaThunderbird fixes the following issues:\n\nSecurity fixes:\n\n- Mozilla Thunderbird 115.2.2 (MFSA 2023-40, bsc#1215245)\n  - CVE-2023-4863: Fixed heap buffer overflow in libwebp (bmo#1852649).\n  \n- Mozilla Thunderbird 115.2 (MFSA 2023-38, bsc#1214606)\n  - CVE-2023-4573: Memory corruption in IPC CanvasTranslator (bmo#1846687) \n  - CVE-2023-4574: Memory corruption in IPC ColorPickerShownCallback (bmo#1846688) \n  - CVE-2023-4575: Memory corruption in IPC FilePickerShownCallback (bmo#1846689) \n  - CVE-2023-4576: Integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694) \n  - CVE-2023-4577: Memory corruption in JIT UpdateRegExpStatics (bmo#1847397) \n  - CVE-2023-4051: Full screen notification obscured by file open dialog (bmo#1821884) \n  - CVE-2023-4578: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (bmo#1839007) \n  - CVE-2023-4053: Full screen notification obscured by external program (bmo#1839079) \n  - CVE-2023-4580: Push notifications saved to disk unencrypted (bmo#1843046) \n  - CVE-2023-4581: XLL file extensions were downloadable without warnings (bmo#1843758) \n  - CVE-2023-4582: Buffer Overflow in WebGL glGetProgramiv (bmo#1773874) \n  - CVE-2023-4583: Browsing Context potentially not cleared when closing Private Window (bmo#1842030) \n  - CVE-2023-4584: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529) \n  - CVE-2023-4585: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999) \n\nOther fixes:\n\nMozilla Thunderbird 115.2.1\n  * new: Column separators are now shown between all columns in\n    tree view (bmo#1847441)\n  * fixed: Crash reporter did not work in Thunderbird Flatpak\n    (bmo#1843102)\n  * fixed: New mail notification always opened message in message\n    pane, even if pane was disabled (bmo#1840092)\n  * fixed: After moving an IMAP message to another folder, the\n    incorrect message was selected in the message list\n    (bmo#1845376)\n  * fixed: Adding a tag to an IMAP message opened in a tab failed\n    (bmo#1844452)\n  * fixed: Junk/Spam folders were not always shown in Unified\n    Folders mode (bmo#1838672)\n  * fixed: Middle-clicking a folder or message did not open it in\n    a background tab, as in previous versions (bmo#1842482)\n  * fixed: Settings tab visual improvements: Advanced Fonts\n    dialog, Section headers hidden behind search box\n    (bmo#1717382,bmo#1846751)\n  * fixed: Various visual and style fixes\n    (bmo#1843707,bmo#1849823)\n  \nMozilla Thunderbird 115.2\n  * new: Thunderbird MSIX packages are now published on\n    archive.mozilla.org (bmo#1817657)\n  * changed: Size, Unread, and Total columns are now right-\n    aligned (bmo#1848604)\n  * changed: Newsgroup names in message list header are now\n    abbreviated (bmo#1833298)\n  * fixed: Message compose window did not apply theme colors to\n    menus (bmo#1845699)\n  * fixed: Reading the second new message in a folder cleared the\n    unread indicator of all other new messages (bmo#1839805)\n  * fixed: Displayed counts of unread or flagged messages could\n    become out-of-sync (bmo#1846860)\n  * fixed: Deleting a message from the context menu with messages\n    sorted in chronological order and smooth scroll enabled\n    caused message list to scroll to top (bmo#1843462)\n  * fixed: Repeatedly switching accounts in Subscribe dialog\n    caused tree view to stop updating (bmo#1845593)\n  * fixed: 'Ignore thread' caused message cards to display\n    incorrectly in message list (bmo#1847966)\n  * fixed: Creating tags from unified toolbar failed\n    (bmo#1846336)\n  * fixed: Cross-folder navigation using F and N did not work\n    (bmo#1845011)\n  * fixed: Account Manager did not resize to fit content, causing\n    'Close' button to become hidden outside bounds of dialog when\n    too many accounts were listed (bmo#1847555)\n  * fixed: Remote content exceptions could not be added in\n    Settings (bmo#1847576)\n  * fixed: Newsgroup list file did not get updated after adding a\n    new NNTP server (bmo#1845464)\n  * fixed: 'Download all headers' option in NNTP 'Download\n    Headers' dialog was incorrectly selected by default\n    (bmo#1845457)\n  * fixed: 'Convert to event/task' was missing from mail context\n    menu (bmo#1817705)\n  * fixed: Events and tasks were not shown in some cases despite\n    being present on remote server (bmo#1827100)\n  * fixed: Various visual and UX improvements\n    (bmo#1844244,bmo#1845645)\n\n- Mozilla Thunderbird 115.1.1\n  * fixed: Some HTML emails printed headers on first page and\n    message on subsequent pages (bmo#1843628)\n  * fixed: Deleting messages from message list sometimes scrolled\n    list to bottom, selecting bottommost message (bmo#1835173)\n  * fixed: Width of icon columns (like Junk or Starred) in\n    message list did not adjust when UI density was changed\n    (bmo#1843014)\n  * fixed: Old OpenPGP secret keys could not be used to decrypt\n    messages under certain circumstances (bmo#1835786)\n  * fixed: When multiple folder modes were active, tab focus\n    navigated through all folder mode options before reaching\n    message list (bmo#1842060)\n  * fixed: Unread message count badge was not displayed on parent\n    folders of subfolder containing unread messages (bmo#1844534)\n  * fixed: 'Undo archive' (via Ctrl-Z) did not un-archive\n    previously archived messages (bmo#1829340)\n  * fixed: 'New' button dropdown menu in 'Message Filters' dialog\n    could not be opened via keyboard navigation (bmo#1843511)\n  * fixed: 'Show New Mail Alert for' input field in 'Customize\n    New Mail Alert' dialog had zero width when using certain\n    language packs (bmo#1845832)\n  * fixed: 'Account Wizard' dialog was too narrow when adding a\n    news server, partially hiding confirmation buttons\n    (bmo#1846588)\n  * fixed: Link Properties and Image Properties dialogs in the\n    composer were too wide (bmo#1816850)\n  * fixed: Thunderbird version number and details in 'About'\n    dialog were not automatically read by screen readers when\n    first opening dialog (bmo#1847078)\n  * fixed: Flatpak improvements and bug fixes\n    (bmo#1825399,bmo#1843094,bmo#1843097)\n  * fixed: Various visual and UX improvements (bmo#1846262)\n","status":"published","published":"2023-09-18T19:50:30Z","modified":"2026-02-04T02:56:48.221278Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"USN-6320-1","title":"firefox vulnerabilities","description":"Multiple security issues were discovered in Firefox. If a user were\ntricked into opening a specially crafted website, an attacker could\npotentially exploit these to cause a denial of service, obtain sensitive\ninformation across domains, or execute arbitrary code. (CVE-2023-4573,\nCVE-2023-4574, CVE-2023-4575, CVE-2023-4578, CVE-2023-4581, CVE-2023-4583,\nCVE-2023-4584, CVE-2023-4585)\n\nLukas Bernhard discovered that Firefox did not properly manage memory when\nthe \"UpdateRegExpStatics\" attempted to access \"initialStringHeap\". An\nattacker could potentially exploit this issue to cause a denial of service.\n(CVE-2023-4577)\n\nMalte Jürgens discovered that Firefox did not properly handle search\nqueries if the search query itself was a well formed URL. An attacker could\npotentially exploit this issue to perform spoofing attacks. (CVE-2023-4579)\n\nHarveer Singh discovered that Firefox did not properly handle push\nnotifications stored on disk in private browsing mode. An attacker could\npotentially exploits this issue to access sensitive information.\n(CVE-2023-4580)\n","status":"published","published":"2023-08-30T04:21:36Z","modified":"2026-04-22T10:38:48.811326Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6368-1","title":"thunderbird vulnerabilities","description":"Multiple security issues were discovered in Thunderbird. If a user were\ntricked into opening a specially crafted website in a browsing context, an\nattacker could potentially exploit these to cause a denial of service,\nobtain sensitive information, bypass security restrictions, cross-site\ntracing, or execute arbitrary code. (CVE-2023-4573, CVE-2023-4574,\nCVE-2023-4575, CVE-2023-4581, CVE-2023-4584)\n\nIt was discovered that Thunderbird did not properly manage memory when\nhandling WebP images. If a user were tricked into opening a malicious WebP\nimage file, an attacker could potentially exploit these to cause a denial\nof service or execute arbitrary code. (CVE-2023-4863)\n","status":"published","published":"2023-09-14T03:30:51Z","modified":"2026-04-22T10:38:55.980711Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}