{"id":"CVE-2025-9187","aliases":["EUVD-2025-25239","GHSA-6rqq-g95r-qrcc","SUSE-SU-2025:03008-1","SUSE-SU-2025:03009-1","SUSE-SU-2025:3759-1","SUSE-SU-2025:3760-1","SUSE-SU-2025:3804-1","UBUNTU-CVE-2025-9187","openSUSE-SU-2025:15516-1","openSUSE-SU-2026:11373-1"],"status":"published","title":"Memory safety bugs fixed in Firefox 142 and Thunderbird 142","description":"Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142 and Thunderbird 142.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0052,"percentile":0.4449,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2025-08-19T20:33:57Z","modified":"2026-10-28T20:16:39Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"mozilla-nss","fixed_in":["3.112.2-58.133.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"mozilla-nss","fixed_in":["3.112.2-58.133.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"mozilla-nss","fixed_in":["3.112.2-150000.3.132.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"mozilla-nss","fixed_in":["3.112.2-150000.3.132.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"mozilla-nss","fixed_in":["3.112.2-150000.3.132.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"mozilla-nss","fixed_in":["3.112.2-150000.3.132.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"mozilla-nss","fixed_in":["3.112.2-150000.3.132.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"mozilla-nss","fixed_in":["3.112.2-150000.3.132.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server LTS 4.3","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"mozilla-nss","fixed_in":["3.112.2-150400.3.60.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-150200.152.198.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-112.276.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.2.0-112.276.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-58.133.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-58.133.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150000.3.132.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150000.3.132.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150000.3.132.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150000.3.132.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150000.3.132.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150000.3.132.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.112.2-150400.3.60.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.3.1-0ubuntu3","52.3.1-7fakesync1","52.8.1-0ubuntu0.18.04.1","52.9.1-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs38","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["38.8.0~repack1-0ubuntu1","38.8.0~repack1-0ubuntu3","38.8.0~repack1-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs68","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["68.5.0-1~fakesync","68.5.0-2~fakesync","68.6.0-1","68.6.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.9.1-1build1","52.9.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.11.0-0ubuntu0.22.04.1","102.12.0-0ubuntu0.22.04.1","102.13.0-0ubuntu0.22.04.1","102.15.1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs78","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["78.13.0-1","78.15.0-2","78.15.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["91.5.1-0ubuntu1","91.6.0-1","91.6.0-2","91.7.0-2","91.10.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.15.1-1","102.15.1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs115","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["115.3.0-0ubuntu1","115.4.0-2","115.5.0-1","115.6.0-1","115.7.0-4","115.8.0-1","115.9.0-1","115.9.0-1build1","115.10.0-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"142.0.1-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0-1.1"}]}],"bundled":228}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=1825621%2C1970079%2C1976736%2C1979072","tags":["Broken Link","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-64/","tags":["Vendor Advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-70/","tags":["Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9187"},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-64"},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-70"},{"url":"https://github.com/advisories/GHSA-6rqq-g95r-qrcc"},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503008-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1226112","tags":["report"]},{"url":"https://bugzilla.suse.com/1247774","tags":["report"]},{"url":"https://bugzilla.suse.com/1248162","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9187","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503009-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253759-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1251263","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253760-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253804-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-9187","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9187","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-64/#CVE-2025-9187","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8973","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-9187","title":"Memory safety bugs fixed in Firefox 142 and Thunderbird 142","description":"Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142 and Thunderbird 142.","status":"published","published":"2025-08-19T20:33:57.516Z","modified":"2026-04-13T14:29:49.002Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:32:33.410838Z"}],"euvd":[{"id":"EUVD-2025-25239","description":"Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142 and Thunderbird 142.","status":"published","published":"2025-08-19T20:33:57Z","modified":"2026-04-13T14:29:49Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:24:28.399811Z"}],"ghsa":[{"id":"GHSA-6rqq-g95r-qrcc","title":"Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence...","description":"Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 142 and Thunderbird \u003c 142.","status":"published","published":"2025-08-19T21:30:38Z","modified":"2025-08-20T18:31:24Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:03:21.511205Z"}],"nvd":[{"id":"CVE-2025-9187","description":"Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142 and Thunderbird 142.","status":"published","published":"2025-08-19T21:15:31.303Z","modified":"2026-09-30T19:10:01.007Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:11:24.730342Z"}],"osv":[{"id":"UBUNTU-CVE-2025-9187","description":"Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142 and Thunderbird 142.","status":"published","published":"2025-08-19T21:15:00Z","modified":"2026-10-28T20:16:39.853806688Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:55:55.926217Z"},{"id":"openSUSE-SU-2025:15516-1","title":"MozillaFirefox-142.0.1-1.1 on GA media","description":"These are all security issues fixed in the MozillaFirefox-142.0.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-09-03T00:00:00Z","modified":"2026-03-23T04:53:53.159796Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:11373-1","title":"firefox-esr-153.0-1.1 on GA media","description":"These are all security issues fixed in the firefox-esr-153.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-25T00:00:00Z","modified":"2026-07-26T13:30:06.696244383Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"SUSE-SU-2025:03008-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\n- Firefox Extended Support Release 140.2.0 ESR\n  MFSA 2025-67 (bsc#1248162)\n  * CVE-2025-9179 (bmo#1979527):\n    Sandbox escape due to invalid pointer in the Audio/Video: GMP\n    component\n  * CVE-2025-9180 (bmo#1979782):\n    Same-origin policy bypass in the Graphics: Canvas2D component\n  * CVE-2025-9181 (bmo#1977130):\n    Uninitialized memory in the JavaScript Engine component\n  * CVE-2025-9182 (bmo#1975837):\n    Denial-of-service due to out-of-memory in the Graphics:\n    WebRender component\n  * CVE-2025-9183 (bmo#1976102):\n    Spoofing issue in the Address Bar component\n  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,\n    bmo#1979955):\n    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird\n    ESR 140.2, Firefox 142 and Thunderbird 142\n  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166):\n    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR\n    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,\n    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142\n  * CVE-2025-9187 (bmo#1825621, bmo#1970079, bmo#1976736,\n    bmo#1979072): Memory safety bugs fixed in Firefox 142 and \n    Thunderbird 142\n\n- Other fixes:\n  * Ensure the use of the correct file-picker on KDE (bsc#1226112)\n","status":"published","published":"2025-08-28T09:18:13Z","modified":"2026-02-04T03:13:32.150772Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03009-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\n- Firefox Extended Support Release 140.2.0 ESR\n  MFSA 2025-67 (bsc#1248162)\n  * CVE-2025-9179 (bmo#1979527):\n    Sandbox escape due to invalid pointer in the Audio/Video: GMP\n    component\n  * CVE-2025-9180 (bmo#1979782):\n    Same-origin policy bypass in the Graphics: Canvas2D component\n  * CVE-2025-9181 (bmo#1977130):\n    Uninitialized memory in the JavaScript Engine component\n  * CVE-2025-9182 (bmo#1975837):\n    Denial-of-service due to out-of-memory in the Graphics:\n    WebRender component\n  * CVE-2025-9183 (bmo#1976102):\n    Spoofing issue in the Address Bar component\n  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,\n    bmo#1979955):\n    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird\n    ESR 140.2, Firefox 142 and Thunderbird 142\n  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166):\n    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR\n    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,\n    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142\n  * CVE-2025-9187 (bmo#1825621, bmo#1970079, bmo#1976736,\n    bmo#1979072): Memory safety bugs fixed in Firefox 142 and \n    Thunderbird 142\n    \n- Other fixes:\n  * Ensure the use of the correct file-picker on KDE (bsc#1226112)\n","status":"published","published":"2025-08-28T09:19:04Z","modified":"2026-02-04T04:35:36.46372Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:3759-1","title":"Security update for mozilla-nss","description":"This update for mozilla-nss fixes the following issues:\n\n- Move NSS DB password hash away from SHA-1\n\nUpdate to NSS 3.112.2:\n\n* Prevent leaks during pkcs12 decoding.\n* SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates\n\nUpdate to NSS 3.112.1:\n\n* restore support for finding certificates by decoded serial number.\n\n","status":"published","published":"2025-10-23T14:00:31Z","modified":"2026-03-23T04:51:18.935159Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3760-1","title":"Security update for mozilla-nss","description":"This update for mozilla-nss fixes the following issues:\n\n- Move NSS DB password hash away from SHA-1.\n\nUpdate to NSS 3.112.2:\n\n* Prevent leaks during pkcs12 decoding.\n* SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates\n\nUpdate to NSS 3.112.1:\n\n* restore support for finding certificates by decoded serial number.\n","status":"published","published":"2025-10-23T14:01:15Z","modified":"2026-02-04T03:08:42.736514Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3804-1","title":"Security update for mozilla-nss","description":"This update for mozilla-nss fixes the following issues:\n\n- Move NSS DB password hash away from SHA-1\n\nUpdate to NSS 3.112.2:\n\n  * Prevent leaks during pkcs12 decoding.\n  * SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates\n\nUpdate to NSS 3.112.1:\n\n  * restore support for finding certificates by decoded serial number.\n\n","status":"published","published":"2025-10-27T11:35:18Z","modified":"2026-02-04T21:30:04.213827Z","updated_at":"2026-11-02T15:54:00.344164Z"}]}}