{"id":"CVE-2026-2760","aliases":["ALSA-2026:3338","ALSA-2026:3339","ALSA-2026:3361","ALSA-2026:3515","ALSA-2026:3516","ALSA-2026:3517","DEBIAN-CVE-2026-2760","DLA-4496-1","DSA-6148-1","EUVD-2026-8482","GHSA-2255-92v8-4pvj","MGASA-2026-0052","MGASA-2026-0053","OESA-2026-1471","OESA-2026-1472","OESA-2026-1473","OESA-2026-1474","OESA-2026-1475","OESA-2026-1539","OESA-2026-1540","RHSA-2026:3338","RHSA-2026:3339","RHSA-2026:3361","RHSA-2026:3491","RHSA-2026:3492","RHSA-2026:3493","RHSA-2026:3494","RHSA-2026:3495","RHSA-2026:3496","RHSA-2026:3497","RHSA-2026:3515","RHSA-2026:3516","RHSA-2026:3517","RHSA-2026:3976","RHSA-2026:3978","RHSA-2026:3979","RHSA-2026:3980","RHSA-2026:3981","RHSA-2026:3982","RHSA-2026:3983","RHSA-2026:3984","RHSA-2026:4022","RHSA-2026:4152","RHSA-2026:4260","RHSA-2026:4432","RLSA-2026:3338","RLSA-2026:3339","RLSA-2026:3361","RLSA-2026:3515","RLSA-2026:3516","RLSA-2026:3517","SUSE-SU-2026:0812-1","SUSE-SU-2026:0871-1","SUSE-SU-2026:0880-1","UBUNTU-CVE-2026-2760","openSUSE-SU-2026:10242-1","openSUSE-SU-2026:10248-1","openSUSE-SU-2026:10257-1","openSUSE-SU-2026:20365-1","openSUSE-SU-2026:20391-1"],"status":"published","title":"Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component","description":"Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00475,"percentile":0.41326,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1384"],"published":"2026-02-24T00:00:00Z","modified":"2026-10-29T11:58:14Z","fixes":[{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["140.8.0esr-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["140.8.0esr-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["140.8.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"thunderbird","fixed_in":["1:140.8.0esr-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"thunderbird","fixed_in":["1:140.8.0esr-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:140.8.0esr-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-2.el8_10.alma.1"}]}],"bundled":38},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-2.el9_7.alma.1"}]}],"bundled":38},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-2.el9_7.alma.1"}]}],"bundled":38},{"source":"osv","ecosystem":"AlmaLinux:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-2.el10_1"}]}],"bundled":38},{"source":"osv","ecosystem":"AlmaLinux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.el8_10.alma.1"}]}],"bundled":38},{"source":"osv","ecosystem":"AlmaLinux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.el9_7.alma.1"}]}],"bundled":38},{"source":"osv","ecosystem":"AlmaLinux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-2.el10_1.alma.1"}]}],"bundled":38},{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0esr-1~deb12u1"}]}],"versions":["102.11.0esr-1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1","102.15.0esr-1~deb12u1","102.15.1esr-1~deb10u1","102.15.1esr-1~deb11u1","102.15.1esr-1~deb12u1","115.0.2esr-1","115.1.0esr-1","115.10.0esr-1","115.10.0esr-1~deb10u1","115.10.0esr-1~deb11u1","115.10.0esr-1~deb12u1","115.11.0esr-1","115.11.0esr-1~deb10u1","115.11.0esr-1~deb11u1","115.11.0esr-1~deb12u1","115.12.0esr-1","115.12.0esr-1~deb10u1","115.12.0esr-1~deb11u1","115.12.0esr-1~deb12u1","115.13.0esr-1","115.13.0esr-1~deb11u1","115.13.0esr-1~deb12u1","115.13.0esr-2","115.14.0esr-1","115.14.0esr-1~deb11u1","115.14.0esr-1~deb12u1","115.15.0esr-1","115.15.0esr-1~deb11u1","115.15.0esr-1~deb12u1","115.2.0esr-1","115.2.1esr-1","115.3.0esr-1","115.3.0esr-1~deb10u1","115.3.0esr-1~deb11u1","115.3.0esr-1~deb12u1","115.3.1esr-1~deb10u1","115.3.1esr-1~deb11u1","115.4.0esr-1","115.4.0esr-1~deb10u1","115.4.0esr-1~deb11u1","115.4.0esr-1~deb12u1","115.5.0esr-1","115.5.0esr-1~deb10u1","115.5.0esr-1~deb11u1","115.5.0esr-1~deb12u1","115.6.0esr-1","115.6.0esr-1~deb10u1","115.6.0esr-1~deb11u1","115.6.0esr-1~deb12u1","115.7.0esr-1","115.7.0esr-1~deb10u1","115.7.0esr-1~deb11u1","115.7.0esr-1~deb12u1","115.8.0esr-1","115.8.0esr-1~deb10u1","115.8.0esr-1~deb11u1","115.8.0esr-1~deb12u1","115.9.0esr-1","115.9.0esr-1~deb11u1","115.9.0esr-1~deb12u1","115.9.0esr-2","115.9.1esr-1","115.9.1esr-1~deb10u1","115.9.1esr-1~deb11u1","115.9.1esr-1~deb12u1","128.10.0esr-1","128.10.0esr-1~deb12u1","128.10.1esr-1","128.10.1esr-1~deb11u1","128.10.1esr-1~deb12u1","128.11.0esr-1","128.11.0esr-1~deb11u1","128.11.0esr-1~deb12u1","128.12.0esr-1","128.12.0esr-1~deb11u1","128.12.0esr-1~deb12u1","128.13.0esr-1","128.13.0esr-1~deb11u1","128.13.0esr-1~deb12u1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","128.3.0esr-1","128.3.0esr-1~deb11u1","128.3.0esr-1~deb11u2","128.3.0esr-1~deb12u1","128.3.0esr-2","128.3.1esr-1","128.3.1esr-1~deb11u1","128.3.1esr-1~deb12u1","128.3.1esr-2","128.4.0esr-1","128.4.0esr-1~deb11u1","128.4.0esr-1~deb12u1","128.5.0esr-1","128.5.0esr-1~deb11u1","128.5.0esr-1~deb12u1","128.5.1esr-1","128.6.0esr-1","128.6.0esr-1~deb11u1","128.6.0esr-1~deb11u2","128.6.0esr-1~deb11u3","128.6.0esr-1~deb12u1","128.6.0esr-2","128.6.0esr-3","128.6.0esr-4","128.7.0esr-1","128.7.0esr-1~deb11u1","128.7.0esr-1~deb12u1","128.8.0esr-1","128.8.0esr-1~deb11u1","128.8.0esr-1~deb12u1","128.9.0esr-1","128.9.0esr-1~deb11u1","128.9.0esr-1~deb12u1","128.9.0esr-2","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1","140.5.0esr-1~deb13u1","140.6.0esr-1","140.6.0esr-1~deb11u1","140.6.0esr-1~deb12u1","140.6.0esr-1~deb13u1","140.7.0esr-1","140.7.0esr-1~deb11u1","140.7.0esr-1~deb12u1","140.7.0esr-1~deb13u1","140.8.0esr-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0esr-1~deb13u1"}]}],"versions":["128.13.0esr-1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1","140.5.0esr-1~deb13u1","140.6.0esr-1","140.6.0esr-1~deb11u1","140.6.0esr-1~deb12u1","140.6.0esr-1~deb13u1","140.7.0esr-1","140.7.0esr-1~deb11u1","140.7.0esr-1~deb12u1","140.7.0esr-1~deb13u1","140.8.0esr-1~deb11u1","140.8.0esr-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0esr-1"}]}],"versions":["128.13.0esr-1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1","140.5.0esr-1~deb13u1","140.6.0esr-1","140.6.0esr-1~deb11u1","140.6.0esr-1~deb12u1","140.6.0esr-1~deb13u1","140.7.0esr-1","140.7.0esr-1~deb11u1","140.7.0esr-1~deb12u1","140.7.0esr-1~deb13u1","140.8.0esr-1~deb11u1","140.8.0esr-1~deb12u1","140.8.0esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.8.0esr-1~deb12u1"}]}],"versions":["1:102.11.0-1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1","1:102.15.0-1~deb12u1","1:102.15.1-1~deb10u1","1:102.15.1-1~deb11u1","1:102.15.1-1~deb12u1","1:103.0~b5-1","1:104.0~b2-1","1:110.0~b4-1","1:112.0~b1-1","1:113.0~b3-1","1:114.0~b2-1","1:115.0-1","1:115.0.1-1","1:115.0.1-2","1:115.0~b4-1","1:115.0~b6-1","1:115.1.0-1","1:115.1.1-1","1:115.10.1-1","1:115.10.1-1~deb10u1","1:115.10.1-1~deb11u1","1:115.10.1-1~deb12u1","1:115.11.0-1","1:115.11.0-1~deb10u1","1:115.11.0-1~deb11u1","1:115.11.0-1~deb12u1","1:115.12.0-1","1:115.12.0-1~deb10u1","1:115.12.0-1~deb11u1","1:115.12.0-1~deb12u1","1:115.13.0-1","1:115.13.0-1~deb11u1","1:115.13.0-1~deb12u1","1:115.14.0-1~deb11u1","1:115.14.0-1~deb12u1","1:115.15.0-1~deb11u1","1:115.15.0-1~deb12u1","1:115.16.0esr-1~deb11u1","1:115.16.0esr-1~deb12u1","1:115.2.0-1","1:115.2.2-1","1:115.3.0-1","1:115.3.0-1~deb12u1","1:115.3.1-1","1:115.3.1-1~deb10u1","1:115.3.1-1~deb11u1","1:115.3.1-1~deb12u1","1:115.4.1-1","1:115.4.1-1~deb10u1","1:115.4.1-1~deb11u1","1:115.4.1-1~deb12u1","1:115.5.0-1","1:115.5.0-1~deb10u1","1:115.5.0-1~deb11u1","1:115.5.0-1~deb12u1","1:115.5.1-1","1:115.5.2-1","1:115.6.0-1","1:115.6.0-1~deb10u1","1:115.6.0-1~deb11u1","1:115.6.0-1~deb12u1","1:115.7.0-1","1:115.7.0-1~deb10u1","1:115.7.0-1~deb11u1","1:115.7.0-1~deb12u1","1:115.8.0-1","1:115.8.0-1~deb10u1","1:115.8.0-1~deb11u1","1:115.8.0-1~deb12u1","1:115.8.1-1","1:115.9.0-1","1:115.9.0-1~deb10u1","1:115.9.0-1~deb11u1","1:115.9.0-1~deb12u1","1:116.0~b7-1","1:117.0~b5-1","1:120.0~b1-1","1:121.0~b3-1","1:122.0~b2-1","1:124.0~b5-1","1:125.0~b3-1","1:127.0~b5-1","1:128.0esr-1","1:128.0~b5-1","1:128.1.0esr-1","1:128.1.1esr-1","1:128.10.0esr-1","1:128.10.0esr-1~deb11u1","1:128.10.0esr-1~deb12u1","1:128.10.1esr-1","1:128.10.1esr-1~deb11u1","1:128.10.1esr-1~deb12u1","1:128.11.0esr-1","1:128.11.0esr-1~deb11u1","1:128.11.0esr-1~deb12u1","1:128.12.0esr-1","1:128.12.0esr-1~deb11u1","1:128.12.0esr-1~deb12u1","1:128.13.0esr-1","1:128.13.0esr-1~deb11u1","1:128.13.0esr-1~deb12u1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:128.2.0esr-1","1:128.2.1esr-1","1:128.2.3esr-1","1:128.3.0esr-1","1:128.3.2esr-1","1:128.4.0esr-1","1:128.4.0esr-1~deb11u1","1:128.4.0esr-1~deb12u1","1:128.4.2esr-1","1:128.4.3esr-1","1:128.4.3esr-1~deb11u1","1:128.4.3esr-1~deb12u1","1:128.5.0esr-1","1:128.5.0esr-1~deb11u1","1:128.5.0esr-1~deb12u1","1:128.5.2esr-1","1:128.6.0esr-1","1:128.6.0esr-1~deb11u1","1:128.6.0esr-1~deb12u1","1:128.7.0esr-1","1:128.7.0esr-1~deb11u1","1:128.7.0esr-1~deb12u1","1:128.8.0esr-1","1:128.8.0esr-1~deb11u1","1:128.8.0esr-1~deb12u1","1:128.9.0esr-1","1:128.9.0esr-1~deb11u1","1:128.9.0esr-1~deb12u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1","1:140.5.0esr-1~deb13u1","1:140.6.0esr-1","1:140.6.0esr-1~deb11u1","1:140.6.0esr-1~deb12u1","1:140.6.0esr-1~deb13u1","1:140.7.0esr-1","1:140.7.0esr-1~deb11u1","1:140.7.0esr-1~deb12u1","1:140.7.0esr-1~deb13u1","1:140.7.1esr-1","1:140.7.1esr-1~deb11u1","1:140.7.1esr-1~deb12u1","1:140.7.1esr-1~deb13u1","1:140.8.0esr-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.8.0esr-1~deb13u1"}]}],"versions":["1:128.13.0esr-1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1","1:140.5.0esr-1~deb13u1","1:140.6.0esr-1","1:140.6.0esr-1~deb11u1","1:140.6.0esr-1~deb12u1","1:140.6.0esr-1~deb13u1","1:140.7.0esr-1","1:140.7.0esr-1~deb11u1","1:140.7.0esr-1~deb12u1","1:140.7.0esr-1~deb13u1","1:140.7.1esr-1","1:140.7.1esr-1~deb11u1","1:140.7.1esr-1~deb12u1","1:140.7.1esr-1~deb13u1","1:140.8.0esr-1~deb11u1","1:140.8.0esr-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.8.0esr-1"}]}],"versions":["1:128.13.0esr-1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1","1:140.5.0esr-1~deb13u1","1:140.6.0esr-1","1:140.6.0esr-1~deb11u1","1:140.6.0esr-1~deb12u1","1:140.6.0esr-1~deb13u1","1:140.7.0esr-1","1:140.7.0esr-1~deb11u1","1:140.7.0esr-1~deb12u1","1:140.7.0esr-1~deb13u1","1:140.7.1esr-1","1:140.7.1esr-1~deb11u1","1:140.7.1esr-1~deb12u1","1:140.7.1esr-1~deb13u1","1:140.8.0esr-1~deb11u1","1:140.8.0esr-1~deb12u1","1:140.8.0esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:11","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0esr-1~deb11u1"}]}],"versions":["102.1.0esr-1","102.1.0esr-2","102.10.0esr-1","102.10.0esr-1~deb10u1","102.10.0esr-1~deb11u1","102.11.0esr-1","102.11.0esr-1~deb10u1","102.11.0esr-1~deb11u1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1","102.15.0esr-1~deb12u1","102.15.1esr-1~deb10u1","102.15.1esr-1~deb11u1","102.15.1esr-1~deb12u1","102.2.0esr-1","102.3.0esr-1","102.3.0esr-1~deb10u1","102.3.0esr-1~deb10u2","102.3.0esr-1~deb11u1","102.4.0esr-1","102.4.0esr-1~deb10u1","102.4.0esr-1~deb11u1","102.5.0esr-1","102.5.0esr-1~deb10u1","102.5.0esr-1~deb11u1","102.6.0esr-1","102.6.0esr-1~deb10u1","102.6.0esr-1~deb11u1","102.7.0esr-1","102.7.0esr-1~deb10u1","102.7.0esr-1~deb11u1","102.8.0esr-1","102.8.0esr-1~deb10u1","102.8.0esr-1~deb11u1","102.9.0esr-1","102.9.0esr-1~deb10u1","102.9.0esr-1~deb11u1","102.9.0esr-2","115.0.2esr-1","115.1.0esr-1","115.10.0esr-1","115.10.0esr-1~deb10u1","115.10.0esr-1~deb11u1","115.10.0esr-1~deb12u1","115.11.0esr-1","115.11.0esr-1~deb10u1","115.11.0esr-1~deb11u1","115.11.0esr-1~deb12u1","115.12.0esr-1","115.12.0esr-1~deb10u1","115.12.0esr-1~deb11u1","115.12.0esr-1~deb12u1","115.13.0esr-1","115.13.0esr-1~deb11u1","115.13.0esr-1~deb12u1","115.13.0esr-2","115.14.0esr-1","115.14.0esr-1~deb11u1","115.14.0esr-1~deb12u1","115.15.0esr-1","115.15.0esr-1~deb11u1","115.15.0esr-1~deb12u1","115.2.0esr-1","115.2.1esr-1","115.3.0esr-1","115.3.0esr-1~deb10u1","115.3.0esr-1~deb11u1","115.3.0esr-1~deb12u1","115.3.1esr-1~deb10u1","115.3.1esr-1~deb11u1","115.4.0esr-1","115.4.0esr-1~deb10u1","115.4.0esr-1~deb11u1","115.4.0esr-1~deb12u1","115.5.0esr-1","115.5.0esr-1~deb10u1","115.5.0esr-1~deb11u1","115.5.0esr-1~deb12u1","115.6.0esr-1","115.6.0esr-1~deb10u1","115.6.0esr-1~deb11u1","115.6.0esr-1~deb12u1","115.7.0esr-1","115.7.0esr-1~deb10u1","115.7.0esr-1~deb11u1","115.7.0esr-1~deb12u1","115.8.0esr-1","115.8.0esr-1~deb10u1","115.8.0esr-1~deb11u1","115.8.0esr-1~deb12u1","115.9.0esr-1","115.9.0esr-1~deb11u1","115.9.0esr-1~deb12u1","115.9.0esr-2","115.9.1esr-1","115.9.1esr-1~deb10u1","115.9.1esr-1~deb11u1","115.9.1esr-1~deb12u1","128.10.0esr-1","128.10.0esr-1~deb12u1","128.10.1esr-1","128.10.1esr-1~deb11u1","128.10.1esr-1~deb12u1","128.11.0esr-1","128.11.0esr-1~deb11u1","128.11.0esr-1~deb12u1","128.12.0esr-1","128.12.0esr-1~deb11u1","128.12.0esr-1~deb12u1","128.13.0esr-1","128.13.0esr-1~deb11u1","128.13.0esr-1~deb12u1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","128.3.0esr-1","128.3.0esr-1~deb11u1","128.3.0esr-1~deb11u2","128.3.0esr-1~deb12u1","128.3.0esr-2","128.3.1esr-1","128.3.1esr-1~deb11u1","128.3.1esr-1~deb12u1","128.3.1esr-2","128.4.0esr-1","128.4.0esr-1~deb11u1","128.4.0esr-1~deb12u1","128.5.0esr-1","128.5.0esr-1~deb11u1","128.5.0esr-1~deb12u1","128.5.1esr-1","128.6.0esr-1","128.6.0esr-1~deb11u1","128.6.0esr-1~deb11u2","128.6.0esr-1~deb11u3","128.6.0esr-1~deb12u1","128.6.0esr-2","128.6.0esr-3","128.6.0esr-4","128.7.0esr-1","128.7.0esr-1~deb11u1","128.7.0esr-1~deb12u1","128.8.0esr-1","128.8.0esr-1~deb11u1","128.8.0esr-1~deb12u1","128.9.0esr-1","128.9.0esr-1~deb11u1","128.9.0esr-1~deb12u1","128.9.0esr-2","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1","140.5.0esr-1~deb13u1","140.6.0esr-1","140.6.0esr-1~deb11u1","140.6.0esr-1~deb12u1","140.6.0esr-1~deb13u1","140.7.0esr-1","140.7.0esr-1~deb11u1","140.7.0esr-1~deb12u1","140.7.0esr-1~deb13u1","78.12.0esr-1","78.13.0esr-1","78.13.0esr-1~deb10u1","78.13.0esr-1~deb11u1","78.13.0esr-1~deb9u1","78.14.0esr-1","78.14.0esr-1~deb10u1","78.14.0esr-1~deb11u1","78.14.0esr-1~deb9u1","78.15.0esr-1~deb10u1","78.15.0esr-1~deb11u1","78.15.0esr-1~deb9u1","91.0.1esr-1","91.0esr-1","91.1.0esr-1","91.10.0esr-1","91.10.0esr-1~deb10u1","91.10.0esr-1~deb11u1","91.10.0esr-1~deb9u1","91.11.0esr-1","91.11.0esr-1~deb10u1","91.11.0esr-1~deb11u1","91.11.0esr-1~deb9u1","91.12.0esr-1","91.12.0esr-1~deb10u1","91.12.0esr-1~deb11u1","91.13.0esr-1~deb10u1","91.13.0esr-1~deb11u1","91.2.0esr-1","91.3.0esr-1","91.3.0esr-2","91.4.0esr-1","91.4.1esr-1~deb11u1","91.4.1esr-1~deb9u1","91.5.0esr-1","91.5.0esr-1~deb10u1","91.5.0esr-1~deb11u1","91.5.0esr-1~deb9u1","91.5.1esr-1","91.6.0esr-1","91.6.0esr-1~deb10u1","91.6.0esr-1~deb11u1","91.6.0esr-1~deb9u1","91.6.1esr-1","91.6.1esr-1~deb10u1","91.6.1esr-1~deb11u1","91.6.1esr-1~deb9u1","91.7.0esr-1","91.7.0esr-1~deb10u1","91.7.0esr-1~deb11u1","91.7.0esr-1~deb9u1","91.8.0esr-1","91.8.0esr-1~deb10u1","91.8.0esr-1~deb11u1","91.8.0esr-1~deb9u1","91.9.0esr-1","91.9.0esr-1~deb10u1","91.9.0esr-1~deb11u1","91.9.0esr-1~deb9u1","91.9.1esr-1","91.9.1esr-1~deb10u1","91.9.1esr-1~deb11u1","91.9.1esr-1~deb9u1"],"bundled":37},{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0esr-1~deb12u1"}]}],"versions":["102.11.0esr-1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1","102.15.0esr-1~deb12u1","102.15.1esr-1~deb10u1","102.15.1esr-1~deb11u1","102.15.1esr-1~deb12u1","115.0.2esr-1","115.1.0esr-1","115.10.0esr-1","115.10.0esr-1~deb10u1","115.10.0esr-1~deb11u1","115.10.0esr-1~deb12u1","115.11.0esr-1","115.11.0esr-1~deb10u1","115.11.0esr-1~deb11u1","115.11.0esr-1~deb12u1","115.12.0esr-1","115.12.0esr-1~deb10u1","115.12.0esr-1~deb11u1","115.12.0esr-1~deb12u1","115.13.0esr-1","115.13.0esr-1~deb11u1","115.13.0esr-1~deb12u1","115.13.0esr-2","115.14.0esr-1","115.14.0esr-1~deb11u1","115.14.0esr-1~deb12u1","115.15.0esr-1","115.15.0esr-1~deb11u1","115.15.0esr-1~deb12u1","115.2.0esr-1","115.2.1esr-1","115.3.0esr-1","115.3.0esr-1~deb10u1","115.3.0esr-1~deb11u1","115.3.0esr-1~deb12u1","115.3.1esr-1~deb10u1","115.3.1esr-1~deb11u1","115.4.0esr-1","115.4.0esr-1~deb10u1","115.4.0esr-1~deb11u1","115.4.0esr-1~deb12u1","115.5.0esr-1","115.5.0esr-1~deb10u1","115.5.0esr-1~deb11u1","115.5.0esr-1~deb12u1","115.6.0esr-1","115.6.0esr-1~deb10u1","115.6.0esr-1~deb11u1","115.6.0esr-1~deb12u1","115.7.0esr-1","115.7.0esr-1~deb10u1","115.7.0esr-1~deb11u1","115.7.0esr-1~deb12u1","115.8.0esr-1","115.8.0esr-1~deb10u1","115.8.0esr-1~deb11u1","115.8.0esr-1~deb12u1","115.9.0esr-1","115.9.0esr-1~deb11u1","115.9.0esr-1~deb12u1","115.9.0esr-2","115.9.1esr-1","115.9.1esr-1~deb10u1","115.9.1esr-1~deb11u1","115.9.1esr-1~deb12u1","128.10.0esr-1","128.10.0esr-1~deb12u1","128.10.1esr-1","128.10.1esr-1~deb11u1","128.10.1esr-1~deb12u1","128.11.0esr-1","128.11.0esr-1~deb11u1","128.11.0esr-1~deb12u1","128.12.0esr-1","128.12.0esr-1~deb11u1","128.12.0esr-1~deb12u1","128.13.0esr-1","128.13.0esr-1~deb11u1","128.13.0esr-1~deb12u1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","128.3.0esr-1","128.3.0esr-1~deb11u1","128.3.0esr-1~deb11u2","128.3.0esr-1~deb12u1","128.3.0esr-2","128.3.1esr-1","128.3.1esr-1~deb11u1","128.3.1esr-1~deb12u1","128.3.1esr-2","128.4.0esr-1","128.4.0esr-1~deb11u1","128.4.0esr-1~deb12u1","128.5.0esr-1","128.5.0esr-1~deb11u1","128.5.0esr-1~deb12u1","128.5.1esr-1","128.6.0esr-1","128.6.0esr-1~deb11u1","128.6.0esr-1~deb11u2","128.6.0esr-1~deb11u3","128.6.0esr-1~deb12u1","128.6.0esr-2","128.6.0esr-3","128.6.0esr-4","128.7.0esr-1","128.7.0esr-1~deb11u1","128.7.0esr-1~deb12u1","128.8.0esr-1","128.8.0esr-1~deb11u1","128.8.0esr-1~deb12u1","128.9.0esr-1","128.9.0esr-1~deb11u1","128.9.0esr-1~deb12u1","128.9.0esr-2","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1","140.5.0esr-1~deb13u1","140.6.0esr-1","140.6.0esr-1~deb11u1","140.6.0esr-1~deb12u1","140.6.0esr-1~deb13u1","140.7.0esr-1","140.7.0esr-1~deb11u1","140.7.0esr-1~deb12u1","140.7.0esr-1~deb13u1","140.8.0esr-1~deb11u1"],"bundled":37},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0esr-1~deb13u1"}]}],"versions":["128.13.0esr-1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1","140.5.0esr-1~deb13u1","140.6.0esr-1","140.6.0esr-1~deb11u1","140.6.0esr-1~deb12u1","140.6.0esr-1~deb13u1","140.7.0esr-1","140.7.0esr-1~deb11u1","140.7.0esr-1~deb12u1","140.7.0esr-1~deb13u1","140.8.0esr-1~deb11u1","140.8.0esr-1~deb12u1"],"bundled":37},{"source":"osv","ecosystem":"Mageia:9","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260206.00-1.mga9"}]}],"bundled":37},{"source":"osv","ecosystem":"Mageia:9","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.121.0-1.mga9"}]}],"bundled":37},{"source":"osv","ecosystem":"Mageia:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.mga9"}]}],"bundled":37},{"source":"osv","ecosystem":"Mageia:9","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.mga9"}]}],"bundled":37},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.mga9"}]}],"bundled":36},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.mga9"}]}],"bundled":36},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.oe2203sp4"}]}],"bundled":38},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.oe2403"}]}],"bundled":37},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.oe2403sp1"}]}],"bundled":37},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.oe2403sp2"}]}],"bundled":37},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.oe2403sp3"}]}],"bundled":37},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.oe2403sp2"}]}],"bundled":37},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.oe2403sp3"}]}],"bundled":35},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_10"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_10"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_10"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el10_1"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el10_1"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el10_1"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_2"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_2"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_2"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_0"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_0"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_0"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_10"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_10"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_10"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el10_1"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el10_1"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el10_1"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el10_0"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el10_0"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el10_0"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_2"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_2"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_2"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_4"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_0"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_0"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_0"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el7_9"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el7_9"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_2"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_2"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_2"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_2"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el10_0"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el10_0"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el10_0"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_2"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_2"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_2"}]}],"bundled":38},{"source":"osv","ecosystem":"Rocky Linux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el8_10"}]}],"bundled":38},{"source":"osv","ecosystem":"Rocky Linux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el9_7"}]}],"bundled":38},{"source":"osv","ecosystem":"Rocky Linux:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el10_1"}]}],"bundled":38},{"source":"osv","ecosystem":"Rocky Linux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el8_10"}]}],"bundled":38},{"source":"osv","ecosystem":"Rocky Linux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-1.el9_7"}]}],"bundled":38},{"source":"osv","ecosystem":"Rocky Linux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.8.0-2.el10_1"}]}],"bundled":38},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-112.301.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-112.301.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.152.222.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.152.222.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.152.222.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.152.222.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.152.222.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.152.222.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.152.222.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.152.222.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.152.222.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.152.222.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.152.222.1"}]}],"bundled":37},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.152.222.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.8.260.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.8.260.1"}]}],"bundled":37},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-150200.8.260.1"}]}],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.3.1-0ubuntu3","52.3.1-7fakesync1","52.8.1-0ubuntu0.18.04.1","52.9.1-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs38","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["38.8.0~repack1-0ubuntu1","38.8.0~repack1-0ubuntu3","38.8.0~repack1-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs68","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["68.5.0-1~fakesync","68.5.0-2~fakesync","68.6.0-1","68.6.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.9.1-1build1","52.9.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.11.0-0ubuntu0.22.04.1","102.12.0-0ubuntu0.22.04.1","102.13.0-0ubuntu0.22.04.1","102.15.1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs78","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["78.13.0-1","78.15.0-2","78.15.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["91.5.1-0ubuntu1","91.6.0-1","91.6.0-2","91.7.0-2","91.10.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1","1:102.8.0+build2-0ubuntu0.22.04.1","1:102.9.0+build1-0ubuntu0.22.04.1","1:102.10.0+build2-0ubuntu0.22.04.1","1:102.11.0+build1-0ubuntu0.22.04.1","1:102.13.0+build1-0ubuntu0.22.04.1","1:102.15.0+build1-0ubuntu0.22.04.1","1:102.15.1+build1-0ubuntu0.22.04.1","1:115.3.1+build1-0ubuntu0.22.04.2","1:115.4.1+build1-0ubuntu0.22.04.1","1:115.5.0+build1-0ubuntu0.22.04.1","1:115.6.0+build2-0ubuntu0.22.04.1","1:115.8.1+build1-0ubuntu0.22.04.1","1:115.9.0+build1-0ubuntu0.22.04.1","1:115.10.1+build1-0ubuntu0.22.04.1","1:115.11.0+build2-0ubuntu0.22.04.1","1:115.12.0+build3-0ubuntu0.22.04.1","1:115.13.0+build5-0ubuntu0.22.04.1","1:115.15.0+build1-0ubuntu0.22.04.1","1:115.16.0+build2-0ubuntu0.22.04.1","1:115.18.0+build1-0ubuntu0.22.04.1","1:128.12.0+build1-0ubuntu0.22.04.1","1:140.7.1+build1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.15.1-1","102.15.1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs115","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["115.3.0-0ubuntu1","115.4.0-2","115.5.0-1","115.6.0-1","115.7.0-4","115.8.0-1","115.9.0-1","115.9.0-1build1","115.10.0-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.1"}]}],"bundled":37},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-1.1"}]}],"bundled":37},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"148.0-1.1"}]}],"bundled":51},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.0-160000.1.1"}]}],"bundled":37},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.8.1-bp160.1.1"}]}],"bundled":52}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"thunderbird"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 advanced update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2011062","tags":["Issue Tracking","Permissions Required","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-13/","tags":["Vendor Advisory","advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-14/","tags":["Vendor Advisory","advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/","tags":["Vendor Advisory","advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-16/","tags":["Vendor Advisory","advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/","tags":["Vendor Advisory","advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2760","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442325","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2760.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3984","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3976","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:4260","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3361","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3517","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3338","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3515","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3492","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:4432","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3491","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3980","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3495","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3979","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3494","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:4022","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3493","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3983","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:4152","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3978","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3496","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3981","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3497","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3982","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3339","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3516","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2760","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-13"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-14"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-16"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17"},{"url":"https://github.com/advisories/GHSA-2255-92v8-4pvj"},{"url":"https://access.redhat.com/security/cve/CVE-2026-2447","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2757","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2758","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2759","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2761","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2762","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2763","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2764","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2765","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2766","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2767","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2768","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2769","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2770","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2771","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2772","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2773","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2774","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2775","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2776","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2777","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2778","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2779","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2780","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2781","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2782","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2783","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2784","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2785","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2786","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2787","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2788","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2789","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2790","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2791","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2792","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2793","tags":["report"]},{"url":"https://bugzilla.redhat.com/2440219","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442284","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442287","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442288","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442290","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442291","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442292","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442294","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442295","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442297","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442298","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442300","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442302","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442304","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442307","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442308","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442309","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442312","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442313","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442314","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442316","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442318","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442319","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442320","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442322","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442324","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442325","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442326","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442327","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442328","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442329","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442331","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442333","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442334","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442335","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442337","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442342","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442343","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-3338.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-3339.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-3361.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-3515.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-3516.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-3517.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-2760","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0052.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35165","tags":["report"]},{"url":"https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_121.html","tags":["web"]},{"url":"https://www.firefox.com/en-US/firefox/140.8.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-15/","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0053.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35166","tags":["report"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/140.8.0esr/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-17/","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1471","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2447","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2757","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2758","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2759","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2761","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2762","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2763","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2764","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2765","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2766","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2767","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2768","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2769","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2770","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2771","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2772","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2773","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2774","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2775","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2776","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2777","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2779","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2780","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2781","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2782","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2783","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2787","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2788","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2789","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2790","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2791","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2792","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2793","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1472","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1473","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1474","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1475","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1539","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0818","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1540","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2440219","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442302","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442316","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442318","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442343","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3338.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2447","tags":["advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2014390","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-10/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2757","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2757","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2757","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2758","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2758","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2758","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2759","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2759","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2759","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2760","tags":["advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2760","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2760","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2761","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2761","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2761","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2762","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2762","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2762","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2763","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2763","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2763","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2764","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2764","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2764","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2765","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2765","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2765","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2766","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2766","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2766","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2767","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2767","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2767","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2768","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2768","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2768","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2769","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2769","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2769","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2770","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2770","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2770","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2771","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2771","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2771","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2772","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2772","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2772","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2773","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2773","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2773","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2774","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2774","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2774","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2775","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2775","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2775","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2776","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2776","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2776","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2777","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2777","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2777","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2778","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2778","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2778","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2779","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2779","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2779","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2780","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2780","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2780","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2781","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2781","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2781","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-31/#CVE-2026-2781","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2782","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2782","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2782","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2783","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2783","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2783","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2784","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2784","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2784","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2785","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2785","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2785","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2786","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2786","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2786","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2787","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2787","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2787","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2788","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2788","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2788","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2789","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2789","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2789","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2790","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2790","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2790","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2791","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2791","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2791","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2792","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2792","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2792","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2793","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2793","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2793","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3339.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3361.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3491.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3492.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3493.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3494.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3495.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3496.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3497.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3515.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3516.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3517.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3976.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3978.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3979.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3980.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3981.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3982.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3983.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3984.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4022.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4152.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4260.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4432.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:3338","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:3339","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:3361","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:3515","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:3516","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:3517","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260812-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1258568","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2793","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260871-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260880-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-2760","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-13/#CVE-2026-2760","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-15/#CVE-2026-2760","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2807","tags":["web"]},{"url":"https://bugzilla.suse.com/1253718","tags":["report"]},{"url":"https://bugzilla.suse.com/1256340","tags":["report"]},{"url":"https://bugzilla.suse.com/1257397","tags":["report"]},{"url":"https://bugzilla.suse.com/1258231","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2447","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-2760","title":"Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component","description":"Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.","status":"published","published":"2026-02-24T13:33:00.29Z","modified":"2026-07-15T01:14:03.073Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"adp"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-1384"],"updated_at":"2026-11-02T13:48:46.911326Z"}],"euvd":[{"id":"EUVD-2026-8482","description":"Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.","status":"published","published":"2026-02-24T13:33:00Z","modified":"2026-07-15T01:14:03Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:19:55.842782Z"}],"ghsa":[{"id":"GHSA-2255-92v8-4pvj","title":"Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This...","description":"Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability affects Firefox \u003c 148, Firefox ESR \u003c 115.33, and Firefox ESR \u003c 140.8.","status":"published","published":"2026-02-24T15:30:31Z","modified":"2026-06-30T03:35:42Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-1384"],"updated_at":"2026-11-02T15:09:04.017394Z"}],"nvd":[{"id":"CVE-2026-2760","description":"Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.","status":"published","published":"2026-02-24T14:16:24.257Z","modified":"2026-07-15T02:19:34.077Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-1384"],"updated_at":"2026-11-02T14:12:06.63895Z"}],"osv":[{"id":"CVE-2026-2760","description":"Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability affects Firefox \u003c 148, Firefox ESR \u003c 115.33, Firefox ESR \u003c 140.8, Thunderbird \u003c 148, and Thunderbird \u003c 140.8.","status":"published","published":"2026-02-24T14:16:24.257Z","modified":"2026-07-01T12:45:32.849624642Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:00.180685Z"},{"id":"DEBIAN-CVE-2026-2760","description":"Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.","status":"published","published":"2026-02-24T14:16:24.257Z","modified":"2026-10-01T03:03:01.424716572Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:53.877573Z"},{"id":"OESA-2026-1471","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nHeap buffer overflow vulnerability exists in libvpx component. This vulnerability affects Firefox \u0026lt; 147.0.4, Firefox ESR \u0026lt; 140.7.1, and Firefox ESR \u0026lt; 115.32.1.(CVE-2026-2447)\n\nIncorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2757)\n\nUse-after-free in the JavaScript: GC component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2758)\n\nIncorrect boundary conditions in the Graphics: ImageLib component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2759)\n\nSandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2760)\n\nSandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2761)\n\nInteger overflow in the JavaScript: Standard Library component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2762)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2763)\n\nJIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2764)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2765)\n\nUse-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2766)\n\nUse-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2767)\n\nSandbox escape in the Storage: IndexedDB component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2768)\n\nA use-after-free vulnerability exists in the Storage: IndexedDB component of Mozilla Firefox, Firefox ESR, and Thunderbird. This vulnerability occurs when the program continues to reference a memory area after it has been freed, which can lead to program crashes, the use of unexpected values, or the execution of arbitrary code. This vulnerability poses a threat to confidentiality, integrity, and availability.(CVE-2026-2769)\n\nUse-after-free in the DOM: Bindings (WebIDL) component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2770)\n\nUndefined behavior in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2771)\n\nUse-after-free in the Audio/Video: Playback component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2772)\n\nIncorrect boundary conditions in the Web Audio component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2773)\n\nInteger overflow in the Audio/Video component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2774)\n\nMitigation bypass in the DOM: HTML Parser component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2775)\n\nSandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2776)\n\nPrivilege escalation in the Messaging System component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2777)\n\nSandbox escape due to incorrect boundary conditions in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2778)\n\nIncorrect boundary conditions in the Networking: JAR component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2779)\n\nPrivilege escalation in the Netmonitor component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2780)\n\nInteger overflow in the Libraries component in NSS. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2781)\n\nPrivilege escalation in the Netmonitor component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2782)\n\nInformation disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2783)\n\nMitigation bypass in the DOM: Security component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2784)\n\nInvalid pointer in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2785)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2786)\n\nUse-after-free in the DOM: Window and Location component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2787)\n\nIncorrect boundary conditions in the Audio/Video: GMP component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2788)\n\nUse-after-free in the Graphics: ImageLib component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2789)\n\nSame-origin policy bypass in the Networking: JAR component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2790)\n\nMitigation bypass in the Networking: Cache component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2791)\n\nMemory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2792)\n\nMemory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2793)","status":"published","published":"2026-02-28T11:10:29Z","modified":"2026-08-18T01:19:35.051482472Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1472","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nIncorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2757)\n\nUse-after-free in the JavaScript: GC component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2758)\n\nIncorrect boundary conditions in the Graphics: ImageLib component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2759)\n\nSandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2760)\n\nSandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2761)\n\nInteger overflow in the JavaScript: Standard Library component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2762)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2763)\n\nJIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2764)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2765)\n\nUse-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2766)\n\nUse-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2767)\n\nSandbox escape in the Storage: IndexedDB component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2768)\n\nA use-after-free vulnerability exists in the Storage: IndexedDB component of Mozilla Firefox, Firefox ESR, and Thunderbird. This vulnerability occurs when the program continues to reference a memory area after it has been freed, which can lead to program crashes, the use of unexpected values, or the execution of arbitrary code. This vulnerability poses a threat to confidentiality, integrity, and availability.(CVE-2026-2769)\n\nUse-after-free in the DOM: Bindings (WebIDL) component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2770)\n\nUndefined behavior in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2771)\n\nUse-after-free in the Audio/Video: Playback component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2772)\n\nIncorrect boundary conditions in the Web Audio component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2773)\n\nInteger overflow in the Audio/Video component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2774)\n\nMitigation bypass in the DOM: HTML Parser component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2775)\n\nSandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2776)\n\nPrivilege escalation in the Messaging System component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2777)\n\nSandbox escape due to incorrect boundary conditions in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2778)\n\nIncorrect boundary conditions in the Networking: JAR component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2779)\n\nPrivilege escalation in the Netmonitor component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2780)\n\nInteger overflow in the Libraries component in NSS. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2781)\n\nPrivilege escalation in the Netmonitor component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2782)\n\nInformation disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2783)\n\nMitigation bypass in the DOM: Security component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2784)\n\nInvalid pointer in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2785)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2786)\n\nUse-after-free in the DOM: Window and Location component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2787)\n\nIncorrect boundary conditions in the Audio/Video: GMP component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2788)\n\nUse-after-free in the Graphics: ImageLib component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2789)\n\nSame-origin policy bypass in the Networking: JAR component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2790)\n\nMitigation bypass in the Networking: Cache component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2791)\n\nMemory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2792)\n\nMemory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2793)","status":"published","published":"2026-02-28T11:10:29Z","modified":"2026-08-18T01:19:34.934404478Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1473","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nIncorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2757)\n\nUse-after-free in the JavaScript: GC component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2758)\n\nIncorrect boundary conditions in the Graphics: ImageLib component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2759)\n\nSandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2760)\n\nSandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2761)\n\nInteger overflow in the JavaScript: Standard Library component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2762)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2763)\n\nJIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2764)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2765)\n\nUse-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2766)\n\nUse-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2767)\n\nSandbox escape in the Storage: IndexedDB component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2768)\n\nA use-after-free vulnerability exists in the Storage: IndexedDB component of Mozilla Firefox, Firefox ESR, and Thunderbird. This vulnerability occurs when the program continues to reference a memory area after it has been freed, which can lead to program crashes, the use of unexpected values, or the execution of arbitrary code. This vulnerability poses a threat to confidentiality, integrity, and availability.(CVE-2026-2769)\n\nUse-after-free in the DOM: Bindings (WebIDL) component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2770)\n\nUndefined behavior in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2771)\n\nUse-after-free in the Audio/Video: Playback component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2772)\n\nIncorrect boundary conditions in the Web Audio component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2773)\n\nInteger overflow in the Audio/Video component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2774)\n\nMitigation bypass in the DOM: HTML Parser component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2775)\n\nSandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2776)\n\nPrivilege escalation in the Messaging System component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2777)\n\nSandbox escape due to incorrect boundary conditions in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2778)\n\nIncorrect boundary conditions in the Networking: JAR component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2779)\n\nPrivilege escalation in the Netmonitor component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2780)\n\nInteger overflow in the Libraries component in NSS. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2781)\n\nPrivilege escalation in the Netmonitor component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2782)\n\nInformation disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2783)\n\nMitigation bypass in the DOM: Security component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2784)\n\nInvalid pointer in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2785)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2786)\n\nUse-after-free in the DOM: Window and Location component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2787)\n\nIncorrect boundary conditions in the Audio/Video: GMP component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2788)\n\nUse-after-free in the Graphics: ImageLib component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2789)\n\nSame-origin policy bypass in the Networking: JAR component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2790)\n\nMitigation bypass in the Networking: Cache component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2791)\n\nMemory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2792)\n\nMemory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2793)","status":"published","published":"2026-02-28T11:10:29Z","modified":"2026-08-18T01:19:35.18247199Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1474","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nIncorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2757)\n\nUse-after-free in the JavaScript: GC component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2758)\n\nIncorrect boundary conditions in the Graphics: ImageLib component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2759)\n\nSandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2760)\n\nSandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2761)\n\nInteger overflow in the JavaScript: Standard Library component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2762)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2763)\n\nJIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2764)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2765)\n\nUse-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2766)\n\nUse-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2767)\n\nSandbox escape in the Storage: IndexedDB component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2768)\n\nA use-after-free vulnerability exists in the Storage: IndexedDB component of Mozilla Firefox, Firefox ESR, and Thunderbird. This vulnerability occurs when the program continues to reference a memory area after it has been freed, which can lead to program crashes, the use of unexpected values, or the execution of arbitrary code. This vulnerability poses a threat to confidentiality, integrity, and availability.(CVE-2026-2769)\n\nUse-after-free in the DOM: Bindings (WebIDL) component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2770)\n\nUndefined behavior in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2771)\n\nUse-after-free in the Audio/Video: Playback component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2772)\n\nIncorrect boundary conditions in the Web Audio component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2773)\n\nInteger overflow in the Audio/Video component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2774)\n\nMitigation bypass in the DOM: HTML Parser component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2775)\n\nSandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2776)\n\nPrivilege escalation in the Messaging System component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2777)\n\nSandbox escape due to incorrect boundary conditions in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2778)\n\nIncorrect boundary conditions in the Networking: JAR component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2779)\n\nPrivilege escalation in the Netmonitor component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2780)\n\nInteger overflow in the Libraries component in NSS. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2781)\n\nPrivilege escalation in the Netmonitor component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2782)\n\nInformation disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2783)\n\nMitigation bypass in the DOM: Security component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2784)\n\nInvalid pointer in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2785)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2786)\n\nUse-after-free in the DOM: Window and Location component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2787)\n\nIncorrect boundary conditions in the Audio/Video: GMP component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2788)\n\nUse-after-free in the Graphics: ImageLib component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2789)\n\nSame-origin policy bypass in the Networking: JAR component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2790)\n\nMitigation bypass in the Networking: Cache component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2791)\n\nMemory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2792)\n\nMemory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2793)","status":"published","published":"2026-02-28T11:10:29Z","modified":"2026-08-18T01:19:35.025172297Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1475","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nIncorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2757)\n\nUse-after-free in the JavaScript: GC component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2758)\n\nIncorrect boundary conditions in the Graphics: ImageLib component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2759)\n\nSandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2760)\n\nSandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2761)\n\nInteger overflow in the JavaScript: Standard Library component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2762)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2763)\n\nJIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2764)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2765)\n\nUse-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2766)\n\nUse-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2767)\n\nSandbox escape in the Storage: IndexedDB component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2768)\n\nA use-after-free vulnerability exists in the Storage: IndexedDB component of Mozilla Firefox, Firefox ESR, and Thunderbird. This vulnerability occurs when the program continues to reference a memory area after it has been freed, which can lead to program crashes, the use of unexpected values, or the execution of arbitrary code. This vulnerability poses a threat to confidentiality, integrity, and availability.(CVE-2026-2769)\n\nUse-after-free in the DOM: Bindings (WebIDL) component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2770)\n\nUndefined behavior in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2771)\n\nUse-after-free in the Audio/Video: Playback component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2772)\n\nIncorrect boundary conditions in the Web Audio component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2773)\n\nInteger overflow in the Audio/Video component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2774)\n\nMitigation bypass in the DOM: HTML Parser component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2775)\n\nSandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2776)\n\nPrivilege escalation in the Messaging System component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2777)\n\nSandbox escape due to incorrect boundary conditions in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2778)\n\nIncorrect boundary conditions in the Networking: JAR component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2779)\n\nPrivilege escalation in the Netmonitor component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2780)\n\nInteger overflow in the Libraries component in NSS. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2781)\n\nPrivilege escalation in the Netmonitor component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2782)\n\nInformation disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2783)\n\nMitigation bypass in the DOM: Security component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2784)\n\nInvalid pointer in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2785)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2786)\n\nUse-after-free in the DOM: Window and Location component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2787)\n\nIncorrect boundary conditions in the Audio/Video: GMP component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2788)\n\nUse-after-free in the Graphics: ImageLib component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2789)\n\nSame-origin policy bypass in the Networking: JAR component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2790)\n\nMitigation bypass in the Networking: Cache component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2791)\n\nMemory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2792)\n\nMemory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2793)","status":"published","published":"2026-02-28T11:10:29Z","modified":"2026-08-18T01:19:34.054049128Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1539","title":"thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\r\n\r\nSecurity Fix(es):\n\nWhen a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of an email that was formatted and styled with HTML and CSS, then the decrypted contents were rendered in a context in which the CSS styles from the outer messages were active. If the user had additionally allowed loading of the remote content referenced by the outer email message, and the email was crafted by the sender using a combination of CSS rules and fonts and animations, then it was possible to extract the secret contents of the email. This vulnerability affects Thunderbird \u0026lt; 147.0.1 and Thunderbird \u0026lt; 140.7.1.(CVE-2026-0818)\n\nHeap buffer overflow in libvpx. This vulnerability affects Firefox \u0026lt; 147.0.4, Firefox ESR \u0026lt; 140.7.1, Firefox ESR \u0026lt; 115.32.1, Thunderbird \u0026lt; 140.7.2, and Thunderbird \u0026lt; 147.0.2.(CVE-2026-2447)\n\nIncorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2757)\n\nUse-after-free in the JavaScript: GC component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2758)\n\nIncorrect boundary conditions in the Graphics: ImageLib component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2759)\n\nSandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2760)\n\nSandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2761)\n\nInteger overflow in the JavaScript: Standard Library component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2762)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2763)\n\nJIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2764)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2765)\n\nUse-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2766)\n\nUse-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2767)\n\nSandbox escape in the Storage: IndexedDB component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2768)\n\nUse-after-free in the Storage: IndexedDB component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2769)\n\nUse-after-free in the DOM: Bindings (WebIDL) component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2770)\n\nUndefined behavior in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2771)\n\nUse-after-free in the Audio/Video: Playback component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2772)\n\nIncorrect boundary conditions in the Web Audio component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2773)\n\nInteger overflow in the Audio/Video component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2774)\n\nMitigation bypass in the DOM: HTML Parser component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2775)\n\nPrivilege escalation in the Messaging System component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2777)\n\nSandbox escape due to incorrect boundary conditions in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2778)\n\nIncorrect boundary conditions in the Networking: JAR component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2779)\n\nInteger overflow in the Libraries component in NSS. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2781)\n\nPrivilege escalation in the Netmonitor component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2782)\n\nInformation disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2783)\n\nMitigation bypass in the DOM: Security component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2784)\n\nInvalid pointer in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2785)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2786)\n\nUse-after-free in the DOM: Window and Location component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2787)\n\nIncorrect boundary conditions in the Audio/Video: GMP component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2788)\n\nUse-after-free in the Graphics: ImageLib component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2789)\n\nSame-origin policy bypass in the Networking: JAR component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2790)\n\nMitigation bypass in the Networking: Cache component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2791)\n\nMemory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2792)\n\nMemory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2793)","status":"published","published":"2026-03-06T11:10:32Z","modified":"2026-08-18T01:19:36.294729899Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1540","title":"thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\r\n\r\nSecurity Fix(es):\n\nIncorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2757)\n\nUse-after-free in the JavaScript: GC component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2758)\n\nIncorrect boundary conditions in the Graphics: ImageLib component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2759)\n\nSandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2760)\n\nSandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2761)\n\nInteger overflow in the JavaScript: Standard Library component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2762)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2763)\n\nJIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2764)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2765)\n\nUse-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2766)\n\nUse-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2767)\n\nSandbox escape in the Storage: IndexedDB component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2768)\n\nUse-after-free in the Storage: IndexedDB component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2769)\n\nUse-after-free in the DOM: Bindings (WebIDL) component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2770)\n\nUndefined behavior in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2771)\n\nUse-after-free in the Audio/Video: Playback component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2772)\n\nIncorrect boundary conditions in the Web Audio component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2773)\n\nInteger overflow in the Audio/Video component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2774)\n\nMitigation bypass in the DOM: HTML Parser component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2775)\n\nPrivilege escalation in the Messaging System component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2777)\n\nSandbox escape due to incorrect boundary conditions in the DOM: Core \u0026amp; HTML component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2778)\n\nIncorrect boundary conditions in the Networking: JAR component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2779)\n\nInteger overflow in the Libraries component in NSS. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2781)\n\nPrivilege escalation in the Netmonitor component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2782)\n\nInformation disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2783)\n\nMitigation bypass in the DOM: Security component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2784)\n\nInvalid pointer in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2785)\n\nUse-after-free in the JavaScript Engine component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2786)\n\nUse-after-free in the DOM: Window and Location component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2787)\n\nIncorrect boundary conditions in the Audio/Video: GMP component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2788)\n\nUse-after-free in the Graphics: ImageLib component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2789)\n\nSame-origin policy bypass in the Networking: JAR component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2790)\n\nMitigation bypass in the Networking: Cache component. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2791)\n\nMemory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2792)\n\nMemory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 148, Firefox ESR \u0026lt; 115.33, Firefox ESR \u0026lt; 140.8, Thunderbird \u0026lt; 148, and Thunderbird \u0026lt; 140.8.(CVE-2026-2793)","status":"published","published":"2026-03-06T11:10:32Z","modified":"2026-08-18T01:19:36.96878824Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"RHSA-2026:3338","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-02-26T10:23:20Z","modified":"2026-10-02T10:13:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3339","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-02-26T10:23:21Z","modified":"2026-10-02T10:13:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3361","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-02-26T10:23:26Z","modified":"2026-10-02T10:13:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3491","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-03-02T10:08:34Z","modified":"2026-10-02T10:14:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3492","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-03-02T10:08:34Z","modified":"2026-10-02T10:14:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3493","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-03-02T10:08:35Z","modified":"2026-10-02T10:14:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3494","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-03-02T10:08:36Z","modified":"2026-10-02T10:14:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3495","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-03-02T10:08:36Z","modified":"2026-10-02T10:14:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3496","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-03-02T10:08:37Z","modified":"2026-10-02T10:14:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3497","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-03-02T10:08:38Z","modified":"2026-10-02T10:14:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3515","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-03-03T10:24:59Z","modified":"2026-10-02T10:14:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3516","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-03-03T10:25:00Z","modified":"2026-10-02T10:14:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3517","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-03-03T10:25:00Z","modified":"2026-10-02T10:14:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3976","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-03-10T10:08:29Z","modified":"2026-10-02T10:15:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:3978","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-03-09T10:08:19Z","modified":"2026-10-02T10:15:42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:3979","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-03-09T10:08:20Z","modified":"2026-10-02T10:15:42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:3980","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-03-09T10:08:20Z","modified":"2026-10-02T10:15:43Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:3981","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-03-09T10:08:21Z","modified":"2026-10-02T10:15:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:3982","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-03-09T10:08:21Z","modified":"2026-10-02T10:15:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:3983","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-03-09T10:08:22Z","modified":"2026-10-02T10:15:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:3984","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-03-09T10:08:23Z","modified":"2026-10-02T10:15:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:4022","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-03-10T10:08:38Z","modified":"2026-10-02T10:15:50Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:4152","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-03-10T10:08:53Z","modified":"2026-10-02T10:15:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:4260","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-03-11T10:12:06Z","modified":"2026-10-02T10:16:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:4432","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-03-13T10:18:22Z","modified":"2026-10-02T10:16:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RLSA-2026:3338","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)\n\n* firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)\n\n* firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)\n\n* firefox: Undefined behavior in the DOM: Core \u0026 HTML component (CVE-2026-2771)\n\n* firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)\n\n* firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)\n\n* firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)\n\n* firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)\n\n* firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)\n\n* firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)\n\n* firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)\n\n* firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)\n\n* firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)\n\n* firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)\n\n* firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)\n\n* firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)\n\n* firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)\n\n* firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)\n\n* firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)\n\n* firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)\n\n* firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)\n\n* firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)\n\n* firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)\n\n* firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)\n\n* firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)\n\n* firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)\n\n* firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)\n\n* firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core \u0026 HTML component (CVE-2026-2778)\n\n* firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)\n\n* firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)\n\n* firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-02-26T20:43:11.648035Z","modified":"2026-02-26T21:45:35.14427Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:3339","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)\n\n* firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)\n\n* firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)\n\n* firefox: Undefined behavior in the DOM: Core \u0026 HTML component (CVE-2026-2771)\n\n* firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)\n\n* firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)\n\n* firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)\n\n* firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)\n\n* firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)\n\n* firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)\n\n* firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)\n\n* firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)\n\n* firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)\n\n* firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)\n\n* firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)\n\n* firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)\n\n* firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)\n\n* firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)\n\n* firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)\n\n* firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)\n\n* firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)\n\n* firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)\n\n* firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)\n\n* firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)\n\n* firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)\n\n* firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)\n\n* firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)\n\n* firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core \u0026 HTML component (CVE-2026-2778)\n\n* firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)\n\n* firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)\n\n* firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-02-26T20:45:27.603517Z","modified":"2026-02-26T21:45:35.599827Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:3361","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)\n\n* firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)\n\n* firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)\n\n* firefox: Undefined behavior in the DOM: Core \u0026 HTML component (CVE-2026-2771)\n\n* firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)\n\n* firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)\n\n* firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)\n\n* firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)\n\n* firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)\n\n* firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)\n\n* firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)\n\n* firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)\n\n* firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)\n\n* firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)\n\n* firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)\n\n* firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)\n\n* firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)\n\n* firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)\n\n* firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)\n\n* firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)\n\n* firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)\n\n* firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)\n\n* firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)\n\n* firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)\n\n* firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)\n\n* firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)\n\n* firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)\n\n* firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core \u0026 HTML component (CVE-2026-2778)\n\n* firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)\n\n* firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)\n\n* firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-02-26T20:47:54.095478Z","modified":"2026-02-26T21:30:32.458496Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:3515","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)\n\n* firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)\n\n* firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)\n\n* firefox: Undefined behavior in the DOM: Core \u0026 HTML component (CVE-2026-2771)\n\n* firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)\n\n* firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)\n\n* firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)\n\n* firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)\n\n* firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)\n\n* firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)\n\n* firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)\n\n* firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)\n\n* firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)\n\n* firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)\n\n* firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)\n\n* firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)\n\n* firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)\n\n* firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)\n\n* firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)\n\n* firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)\n\n* firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)\n\n* firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)\n\n* firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)\n\n* firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)\n\n* firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)\n\n* firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)\n\n* firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)\n\n* firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core \u0026 HTML component (CVE-2026-2778)\n\n* firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)\n\n* firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)\n\n* firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-03-03T09:06:42.551564Z","modified":"2026-03-09T01:22:36.355668Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:3516","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)\n\n* firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)\n\n* firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)\n\n* firefox: Undefined behavior in the DOM: Core \u0026 HTML component (CVE-2026-2771)\n\n* firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)\n\n* firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)\n\n* firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)\n\n* firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)\n\n* firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)\n\n* firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)\n\n* firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)\n\n* firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)\n\n* firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)\n\n* firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)\n\n* firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)\n\n* firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)\n\n* firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)\n\n* firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)\n\n* firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)\n\n* firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)\n\n* firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)\n\n* firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)\n\n* firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)\n\n* firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)\n\n* firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)\n\n* firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)\n\n* firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)\n\n* firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core \u0026 HTML component (CVE-2026-2778)\n\n* firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)\n\n* firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)\n\n* firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-03-03T09:09:53.136964Z","modified":"2026-03-09T01:18:16.899713Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:3517","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)\n\n* firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)\n\n* firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)\n\n* firefox: Undefined behavior in the DOM: Core \u0026 HTML component (CVE-2026-2771)\n\n* firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)\n\n* firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)\n\n* firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)\n\n* firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)\n\n* firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)\n\n* firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)\n\n* firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)\n\n* firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)\n\n* firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)\n\n* firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)\n\n* firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)\n\n* firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)\n\n* firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)\n\n* firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)\n\n* firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)\n\n* firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)\n\n* firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)\n\n* firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)\n\n* firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)\n\n* firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)\n\n* firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)\n\n* firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)\n\n* firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)\n\n* firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)\n\n* firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core \u0026 HTML component (CVE-2026-2778)\n\n* firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)\n\n* firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)\n\n* firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-03-05T09:12:24.748134Z","modified":"2026-03-09T01:22:10.742776Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2026-2760","description":"Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.","status":"published","published":"2026-02-24T14:16:00Z","modified":"2026-10-28T20:17:46.862228807Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:56:08.726452Z"},{"id":"ALSA-2026:3338","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)\n  * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)\n  * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)\n  * firefox: Undefined behavior in the DOM: Core \u0026 HTML component (CVE-2026-2771)\n  * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)\n  * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)\n  * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)\n  * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)\n  * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)\n  * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)\n  * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)\n  * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)\n  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)\n  * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)\n  * firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)\n  * firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)\n  * firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)\n  * firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)\n  * firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)\n  * firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)\n  * firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)\n  * firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)\n  * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)\n  * firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)\n  * firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)\n  * firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)\n  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)\n  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core \u0026 HTML component (CVE-2026-2778)\n  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)\n  * firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)\n  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-02-25T00:00:00Z","modified":"2026-10-29T11:02:24.247394167Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:3339","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)\n  * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)\n  * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)\n  * firefox: Undefined behavior in the DOM: Core \u0026 HTML component (CVE-2026-2771)\n  * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)\n  * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)\n  * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)\n  * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)\n  * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)\n  * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)\n  * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)\n  * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)\n  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)\n  * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)\n  * firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)\n  * firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)\n  * firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)\n  * firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)\n  * firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)\n  * firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)\n  * firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)\n  * firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)\n  * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)\n  * firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)\n  * firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)\n  * firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)\n  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)\n  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core \u0026 HTML component (CVE-2026-2778)\n  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)\n  * firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)\n  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-02-25T00:00:00Z","modified":"2026-10-29T11:32:21.426221847Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:3361","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)\n  * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)\n  * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)\n  * firefox: Undefined behavior in the DOM: Core \u0026 HTML component (CVE-2026-2771)\n  * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)\n  * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)\n  * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)\n  * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)\n  * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)\n  * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)\n  * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)\n  * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)\n  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)\n  * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)\n  * firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)\n  * firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)\n  * firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)\n  * firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)\n  * firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)\n  * firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)\n  * firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)\n  * firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)\n  * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)\n  * firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)\n  * firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)\n  * firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)\n  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)\n  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core \u0026 HTML component (CVE-2026-2778)\n  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)\n  * firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)\n  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-02-25T00:00:00Z","modified":"2026-10-29T11:58:14.562841Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:3515","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)\n  * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)\n  * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)\n  * firefox: Undefined behavior in the DOM: Core \u0026 HTML component (CVE-2026-2771)\n  * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)\n  * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)\n  * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)\n  * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)\n  * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)\n  * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)\n  * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)\n  * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)\n  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)\n  * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)\n  * firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)\n  * firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)\n  * firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)\n  * firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)\n  * firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)\n  * firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)\n  * firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)\n  * firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)\n  * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)\n  * firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)\n  * firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)\n  * firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)\n  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)\n  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core \u0026 HTML component (CVE-2026-2778)\n  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)\n  * firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)\n  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-03-02T00:00:00Z","modified":"2026-10-29T11:02:24.30275056Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:3516","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)\n  * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)\n  * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)\n  * firefox: Undefined behavior in the DOM: Core \u0026 HTML component (CVE-2026-2771)\n  * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)\n  * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)\n  * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)\n  * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)\n  * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)\n  * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)\n  * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)\n  * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)\n  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)\n  * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)\n  * firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)\n  * firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)\n  * firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)\n  * firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)\n  * firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)\n  * firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)\n  * firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)\n  * firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)\n  * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)\n  * firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)\n  * firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)\n  * firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)\n  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)\n  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core \u0026 HTML component (CVE-2026-2778)\n  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)\n  * firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)\n  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-03-02T00:00:00Z","modified":"2026-10-29T11:32:35.757619118Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:3517","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)\n  * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)\n  * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)\n  * firefox: Undefined behavior in the DOM: Core \u0026 HTML component (CVE-2026-2771)\n  * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)\n  * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)\n  * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)\n  * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)\n  * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)\n  * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)\n  * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)\n  * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)\n  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)\n  * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)\n  * firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)\n  * firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)\n  * firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)\n  * firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)\n  * firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)\n  * firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)\n  * firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)\n  * firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)\n  * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)\n  * firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)\n  * firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)\n  * firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)\n  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)\n  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core \u0026 HTML component (CVE-2026-2778)\n  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)\n  * firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)\n  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-03-02T00:00:00Z","modified":"2026-10-29T11:58:13.358288Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"DLA-4496-1","title":"firefox-esr - security update","status":"published","published":"2026-03-02T00:00:00Z","modified":"2026-03-02T18:30:31.007029Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-6148-1","title":"firefox-esr - security update","status":"published","published":"2026-02-25T00:00:00Z","modified":"2026-03-09T02:09:25.657301Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2026-0052","title":"Updated rootcerts, nss \u0026 firefox packages fix security vulnerabilities","description":"Incorrect boundary conditions in the WebRTC: Audio/Video component.\n(CVE-2026-2757)\nUse-after-free in the JavaScript: GC component. (CVE-2026-2758)\nIncorrect boundary conditions in the Graphics: ImageLib component.\n(CVE-2026-2759)\nSandbox escape due to incorrect boundary conditions in the Graphics:\nWebRender component. (CVE-2026-2760)\nSandbox escape in the Graphics: WebRender component. (CVE-2026-2761)\nInteger overflow in the JavaScript: Standard Library component.\n(CVE-2026-2762)\nUse-after-free in the JavaScript Engine component. (CVE-2026-2763)\nJIT miscompilation, use-after-free in the JavaScript Engine: JIT\ncomponent. (CVE-2026-2764)\nUse-after-free in the JavaScript Engine component. (CVE-2026-2765)\nUse-after-free in the JavaScript Engine: JIT component. (CVE-2026-2766)\nUse-after-free in the JavaScript: WebAssembly component. (CVE-2026-2767)\nSandbox escape in the Storage: IndexedDB component. (CVE-2026-2768)\nUse-after-free in the Storage: IndexedDB component. (CVE-2026-2769)\nUse-after-free in the DOM: Bindings (WebIDL) component. (CVE-2026-2770)\nUndefined behavior in the DOM: Core \u0026 HTML component. (CVE-2026-2771)\nUse-after-free in the Audio/Video: Playback component. (CVE-2026-2772)\nIncorrect boundary conditions in the Web Audio component.\n(CVE-2026-2773)\nInteger overflow in the Audio/Video component. (CVE-2026-2774)\nMitigation bypass in the DOM: HTML Parser component. (CVE-2026-2775)\nSandbox escape due to incorrect boundary conditions in the Telemetry\ncomponent in External Software. (CVE-2026-2776)\nPrivilege escalation in the Messaging System component. (CVE-2026-2777)\nSandbox escape due to incorrect boundary conditions in the DOM: Core \u0026\nHTML component. (CVE-2026-2778)\nIncorrect boundary conditions in the Networking: JAR component.\n(CVE-2026-2779)\nPrivilege escalation in the Netmonitor component. (CVE-2026-2780)\nInteger overflow in the Libraries component in NSS. (CVE-2026-2781)\nPrivilege escalation in the Netmonitor component. (CVE-2026-2782)\nInformation disclosure due to JIT miscompilation in the JavaScript\nEngine: JIT component. (CVE-2026-2783)\nMitigation bypass in the DOM: Security component. (CVE-2026-2784)\nInvalid pointer in the JavaScript Engine component. (CVE-2026-2785)\nUse-after-free in the JavaScript Engine component. (CVE-2026-2786)\nUse-after-free in the DOM: Window and Location component.\n(CVE-2026-2787)\nIncorrect boundary conditions in the Audio/Video: GMP component.\n(CVE-2026-2788)\nUse-after-free in the Graphics: ImageLib component. (CVE-2026-2789)\nSame-origin policy bypass in the Networking: JAR component.\n(CVE-2026-2790)\nMitigation bypass in the Networking: Cache component. (CVE-2026-2791)\nMemory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8,\nFirefox 148 and Thunderbird 148. (CVE-2026-2792)\nMemory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8,\nThunderbird ESR 140.8, Firefox 148 and Thunderbird 148. (CVE-2026-2793)\n","status":"published","published":"2026-03-09T17:48:59Z","modified":"2026-04-16T04:41:45.595508042Z","updated_at":"2026-11-02T15:49:43.178336Z"}]},"sources_more":{"osv":9}}