{"id":"CVE-2026-6746","aliases":["ALSA-2026:10757","ALSA-2026:10766","ALSA-2026:10767","ALSA-2026:12285","ALSA-2026:13537","ALSA-2026:15892","ALSA-2026:19348","CLSA-2026-1780952647","DEBIAN-CVE-2026-6746","EUVD-2026-24087","GHSA-r37m-3hw5-974w","MGASA-2026-0124","MGASA-2026-0125","OESA-2026-2105","OESA-2026-2106","OESA-2026-2107","OESA-2026-2108","OESA-2026-2109","RHSA-2026:10757","RHSA-2026:10766","RHSA-2026:10767","RHSA-2026:12285","RHSA-2026:13537","RHSA-2026:15892","RHSA-2026:17477","RHSA-2026:17687","RHSA-2026:17688","RHSA-2026:17689","RHSA-2026:17690","RHSA-2026:19041","RHSA-2026:19131","RHSA-2026:19201","RHSA-2026:19348","RHSA-2026:19461","RHSA-2026:19462","RHSA-2026:19463","RHSA-2026:19464","RHSA-2026:19465","RHSA-2026:19466","RHSA-2026:19467","RHSA-2026:19468","RHSA-2026:19469","RHSA-2026:19542","RHSA-2026:19655","RHSA-2026:19704","RLSA-2026:10757","RLSA-2026:10766","RLSA-2026:10767","RLSA-2026:12285","RLSA-2026:13537","RLSA-2026:15892","RLSA-2026:19201","RLSA-2026:19348","SUSE-SU-2026:1649-1","SUSE-SU-2026:1650-1","SUSE-SU-2026:1741-1","SUSE-SU-2026:21383-1","UBUNTU-CVE-2026-6746","openSUSE-SU-2026:10610-1","openSUSE-SU-2026:10626-1","openSUSE-SU-2026:11373-1","openSUSE-SU-2026:20621-1","openSUSE-SU-2026:20664-1"],"status":"published","title":"Use-after-free in the DOM: Core \u0026 HTML component","description":"Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00946,"percentile":0.61357,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416","CWE-825"],"published":"2026-04-21T12:40:44Z","modified":"2026-11-06T12:00:03Z","fixes":[{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["140.10.0esr-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["140.10.0esr-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["140.10.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"thunderbird","fixed_in":["1:140.10.0esr-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"thunderbird","fixed_in":["1:140.10.0esr-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:140.10.0esr-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0-1.el9_7.alma.1"}]}],"bundled":25},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0-1.el9_7.alma.1"}]}],"bundled":25},{"source":"osv","ecosystem":"AlmaLinux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0-1.el8_10.alma.1"}]}],"bundled":26},{"source":"osv","ecosystem":"AlmaLinux:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0-1.el10_1"}]}],"bundled":25},{"source":"osv","ecosystem":"AlmaLinux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0-1.el10_1.alma.1"}]}],"bundled":25},{"source":"osv","ecosystem":"AlmaLinux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0-1.el8_10.alma.1"}]}],"bundled":26},{"source":"osv","ecosystem":"AlmaLinux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0-1.el9_7.alma.1"}]}],"bundled":25},{"source":"osv","ecosystem":"AlmaLinux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.el9_8.alma.1"}]}],"bundled":29},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.4.1-1.el9_2.alma.tuxcare.els9"}]}],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0esr-1~deb12u1"}]}],"versions":["102.11.0esr-1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1","102.15.0esr-1~deb12u1","102.15.1esr-1~deb10u1","102.15.1esr-1~deb11u1","102.15.1esr-1~deb12u1","115.0.2esr-1","115.1.0esr-1","115.10.0esr-1","115.10.0esr-1~deb10u1","115.10.0esr-1~deb11u1","115.10.0esr-1~deb12u1","115.11.0esr-1","115.11.0esr-1~deb10u1","115.11.0esr-1~deb11u1","115.11.0esr-1~deb12u1","115.12.0esr-1","115.12.0esr-1~deb10u1","115.12.0esr-1~deb11u1","115.12.0esr-1~deb12u1","115.13.0esr-1","115.13.0esr-1~deb11u1","115.13.0esr-1~deb12u1","115.13.0esr-2","115.14.0esr-1","115.14.0esr-1~deb11u1","115.14.0esr-1~deb12u1","115.15.0esr-1","115.15.0esr-1~deb11u1","115.15.0esr-1~deb12u1","115.2.0esr-1","115.2.1esr-1","115.3.0esr-1","115.3.0esr-1~deb10u1","115.3.0esr-1~deb11u1","115.3.0esr-1~deb12u1","115.3.1esr-1~deb10u1","115.3.1esr-1~deb11u1","115.4.0esr-1","115.4.0esr-1~deb10u1","115.4.0esr-1~deb11u1","115.4.0esr-1~deb12u1","115.5.0esr-1","115.5.0esr-1~deb10u1","115.5.0esr-1~deb11u1","115.5.0esr-1~deb12u1","115.6.0esr-1","115.6.0esr-1~deb10u1","115.6.0esr-1~deb11u1","115.6.0esr-1~deb12u1","115.7.0esr-1","115.7.0esr-1~deb10u1","115.7.0esr-1~deb11u1","115.7.0esr-1~deb12u1","115.8.0esr-1","115.8.0esr-1~deb10u1","115.8.0esr-1~deb11u1","115.8.0esr-1~deb12u1","115.9.0esr-1","115.9.0esr-1~deb11u1","115.9.0esr-1~deb12u1","115.9.0esr-2","115.9.1esr-1","115.9.1esr-1~deb10u1","115.9.1esr-1~deb11u1","115.9.1esr-1~deb12u1","128.10.0esr-1","128.10.0esr-1~deb12u1","128.10.1esr-1","128.10.1esr-1~deb11u1","128.10.1esr-1~deb12u1","128.11.0esr-1","128.11.0esr-1~deb11u1","128.11.0esr-1~deb12u1","128.12.0esr-1","128.12.0esr-1~deb11u1","128.12.0esr-1~deb12u1","128.13.0esr-1","128.13.0esr-1~deb11u1","128.13.0esr-1~deb12u1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","128.3.0esr-1","128.3.0esr-1~deb11u1","128.3.0esr-1~deb11u2","128.3.0esr-1~deb12u1","128.3.0esr-2","128.3.1esr-1","128.3.1esr-1~deb11u1","128.3.1esr-1~deb12u1","128.3.1esr-2","128.4.0esr-1","128.4.0esr-1~deb11u1","128.4.0esr-1~deb12u1","128.5.0esr-1","128.5.0esr-1~deb11u1","128.5.0esr-1~deb12u1","128.5.1esr-1","128.6.0esr-1","128.6.0esr-1~deb11u1","128.6.0esr-1~deb11u2","128.6.0esr-1~deb11u3","128.6.0esr-1~deb12u1","128.6.0esr-2","128.6.0esr-3","128.6.0esr-4","128.7.0esr-1","128.7.0esr-1~deb11u1","128.7.0esr-1~deb12u1","128.8.0esr-1","128.8.0esr-1~deb11u1","128.8.0esr-1~deb12u1","128.9.0esr-1","128.9.0esr-1~deb11u1","128.9.0esr-1~deb12u1","128.9.0esr-2","140.10.0esr-1~deb11u1","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1","140.5.0esr-1~deb13u1","140.6.0esr-1","140.6.0esr-1~deb11u1","140.6.0esr-1~deb12u1","140.6.0esr-1~deb13u1","140.7.0esr-1","140.7.0esr-1~deb11u1","140.7.0esr-1~deb12u1","140.7.0esr-1~deb13u1","140.8.0esr-1","140.8.0esr-1~deb11u1","140.8.0esr-1~deb12u1","140.8.0esr-1~deb13u1","140.9.0esr-1","140.9.0esr-1~deb11u1","140.9.0esr-1~deb12u1","140.9.0esr-1~deb13u1","140.9.1esr-1","140.9.1esr-1~deb11u1","140.9.1esr-1~deb12u1","140.9.1esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0esr-1~deb13u1"}]}],"versions":["128.13.0esr-1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","140.10.0esr-1~deb11u1","140.10.0esr-1~deb12u1","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1","140.5.0esr-1~deb13u1","140.6.0esr-1","140.6.0esr-1~deb11u1","140.6.0esr-1~deb12u1","140.6.0esr-1~deb13u1","140.7.0esr-1","140.7.0esr-1~deb11u1","140.7.0esr-1~deb12u1","140.7.0esr-1~deb13u1","140.8.0esr-1","140.8.0esr-1~deb11u1","140.8.0esr-1~deb12u1","140.8.0esr-1~deb13u1","140.9.0esr-1","140.9.0esr-1~deb11u1","140.9.0esr-1~deb12u1","140.9.0esr-1~deb13u1","140.9.1esr-1","140.9.1esr-1~deb11u1","140.9.1esr-1~deb12u1","140.9.1esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0esr-1"}]}],"versions":["128.13.0esr-1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","140.10.0esr-1~deb11u1","140.10.0esr-1~deb12u1","140.10.0esr-1~deb13u1","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1","140.5.0esr-1~deb13u1","140.6.0esr-1","140.6.0esr-1~deb11u1","140.6.0esr-1~deb12u1","140.6.0esr-1~deb13u1","140.7.0esr-1","140.7.0esr-1~deb11u1","140.7.0esr-1~deb12u1","140.7.0esr-1~deb13u1","140.8.0esr-1","140.8.0esr-1~deb11u1","140.8.0esr-1~deb12u1","140.8.0esr-1~deb13u1","140.9.0esr-1","140.9.0esr-1~deb11u1","140.9.0esr-1~deb12u1","140.9.0esr-1~deb13u1","140.9.1esr-1","140.9.1esr-1~deb11u1","140.9.1esr-1~deb12u1","140.9.1esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.10.0esr-1~deb12u1"}]}],"versions":["1:102.11.0-1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1","1:102.15.0-1~deb12u1","1:102.15.1-1~deb10u1","1:102.15.1-1~deb11u1","1:102.15.1-1~deb12u1","1:103.0~b5-1","1:104.0~b2-1","1:110.0~b4-1","1:112.0~b1-1","1:113.0~b3-1","1:114.0~b2-1","1:115.0-1","1:115.0.1-1","1:115.0.1-2","1:115.0~b4-1","1:115.0~b6-1","1:115.1.0-1","1:115.1.1-1","1:115.10.1-1","1:115.10.1-1~deb10u1","1:115.10.1-1~deb11u1","1:115.10.1-1~deb12u1","1:115.11.0-1","1:115.11.0-1~deb10u1","1:115.11.0-1~deb11u1","1:115.11.0-1~deb12u1","1:115.12.0-1","1:115.12.0-1~deb10u1","1:115.12.0-1~deb11u1","1:115.12.0-1~deb12u1","1:115.13.0-1","1:115.13.0-1~deb11u1","1:115.13.0-1~deb12u1","1:115.14.0-1~deb11u1","1:115.14.0-1~deb12u1","1:115.15.0-1~deb11u1","1:115.15.0-1~deb12u1","1:115.16.0esr-1~deb11u1","1:115.16.0esr-1~deb12u1","1:115.2.0-1","1:115.2.2-1","1:115.3.0-1","1:115.3.0-1~deb12u1","1:115.3.1-1","1:115.3.1-1~deb10u1","1:115.3.1-1~deb11u1","1:115.3.1-1~deb12u1","1:115.4.1-1","1:115.4.1-1~deb10u1","1:115.4.1-1~deb11u1","1:115.4.1-1~deb12u1","1:115.5.0-1","1:115.5.0-1~deb10u1","1:115.5.0-1~deb11u1","1:115.5.0-1~deb12u1","1:115.5.1-1","1:115.5.2-1","1:115.6.0-1","1:115.6.0-1~deb10u1","1:115.6.0-1~deb11u1","1:115.6.0-1~deb12u1","1:115.7.0-1","1:115.7.0-1~deb10u1","1:115.7.0-1~deb11u1","1:115.7.0-1~deb12u1","1:115.8.0-1","1:115.8.0-1~deb10u1","1:115.8.0-1~deb11u1","1:115.8.0-1~deb12u1","1:115.8.1-1","1:115.9.0-1","1:115.9.0-1~deb10u1","1:115.9.0-1~deb11u1","1:115.9.0-1~deb12u1","1:116.0~b7-1","1:117.0~b5-1","1:120.0~b1-1","1:121.0~b3-1","1:122.0~b2-1","1:124.0~b5-1","1:125.0~b3-1","1:127.0~b5-1","1:128.0esr-1","1:128.0~b5-1","1:128.1.0esr-1","1:128.1.1esr-1","1:128.10.0esr-1","1:128.10.0esr-1~deb11u1","1:128.10.0esr-1~deb12u1","1:128.10.1esr-1","1:128.10.1esr-1~deb11u1","1:128.10.1esr-1~deb12u1","1:128.11.0esr-1","1:128.11.0esr-1~deb11u1","1:128.11.0esr-1~deb12u1","1:128.12.0esr-1","1:128.12.0esr-1~deb11u1","1:128.12.0esr-1~deb12u1","1:128.13.0esr-1","1:128.13.0esr-1~deb11u1","1:128.13.0esr-1~deb12u1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:128.2.0esr-1","1:128.2.1esr-1","1:128.2.3esr-1","1:128.3.0esr-1","1:128.3.2esr-1","1:128.4.0esr-1","1:128.4.0esr-1~deb11u1","1:128.4.0esr-1~deb12u1","1:128.4.2esr-1","1:128.4.3esr-1","1:128.4.3esr-1~deb11u1","1:128.4.3esr-1~deb12u1","1:128.5.0esr-1","1:128.5.0esr-1~deb11u1","1:128.5.0esr-1~deb12u1","1:128.5.2esr-1","1:128.6.0esr-1","1:128.6.0esr-1~deb11u1","1:128.6.0esr-1~deb12u1","1:128.7.0esr-1","1:128.7.0esr-1~deb11u1","1:128.7.0esr-1~deb12u1","1:128.8.0esr-1","1:128.8.0esr-1~deb11u1","1:128.8.0esr-1~deb12u1","1:128.9.0esr-1","1:128.9.0esr-1~deb11u1","1:128.9.0esr-1~deb12u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.10.0esr-1~deb11u1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1","1:140.5.0esr-1~deb13u1","1:140.6.0esr-1","1:140.6.0esr-1~deb11u1","1:140.6.0esr-1~deb12u1","1:140.6.0esr-1~deb13u1","1:140.7.0esr-1","1:140.7.0esr-1~deb11u1","1:140.7.0esr-1~deb12u1","1:140.7.0esr-1~deb13u1","1:140.7.1esr-1","1:140.7.1esr-1~deb11u1","1:140.7.1esr-1~deb12u1","1:140.7.1esr-1~deb13u1","1:140.8.0esr-1","1:140.8.0esr-1~deb11u1","1:140.8.0esr-1~deb12u1","1:140.8.0esr-1~deb13u1","1:140.9.0esr-1","1:140.9.0esr-1~deb11u1","1:140.9.0esr-1~deb12u1","1:140.9.0esr-1~deb13u1","1:140.9.1esr-1","1:140.9.1esr-1~deb11u1","1:140.9.1esr-1~deb12u1","1:140.9.1esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.10.0esr-1~deb13u1"}]}],"versions":["1:128.13.0esr-1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.10.0esr-1~deb11u1","1:140.10.0esr-1~deb12u1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1","1:140.5.0esr-1~deb13u1","1:140.6.0esr-1","1:140.6.0esr-1~deb11u1","1:140.6.0esr-1~deb12u1","1:140.6.0esr-1~deb13u1","1:140.7.0esr-1","1:140.7.0esr-1~deb11u1","1:140.7.0esr-1~deb12u1","1:140.7.0esr-1~deb13u1","1:140.7.1esr-1","1:140.7.1esr-1~deb11u1","1:140.7.1esr-1~deb12u1","1:140.7.1esr-1~deb13u1","1:140.8.0esr-1","1:140.8.0esr-1~deb11u1","1:140.8.0esr-1~deb12u1","1:140.8.0esr-1~deb13u1","1:140.9.0esr-1","1:140.9.0esr-1~deb11u1","1:140.9.0esr-1~deb12u1","1:140.9.0esr-1~deb13u1","1:140.9.1esr-1","1:140.9.1esr-1~deb11u1","1:140.9.1esr-1~deb12u1","1:140.9.1esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.10.0esr-1"}]}],"versions":["1:128.13.0esr-1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.10.0esr-1~deb11u1","1:140.10.0esr-1~deb12u1","1:140.10.0esr-1~deb13u1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1","1:140.5.0esr-1~deb13u1","1:140.6.0esr-1","1:140.6.0esr-1~deb11u1","1:140.6.0esr-1~deb12u1","1:140.6.0esr-1~deb13u1","1:140.7.0esr-1","1:140.7.0esr-1~deb11u1","1:140.7.0esr-1~deb12u1","1:140.7.0esr-1~deb13u1","1:140.7.1esr-1","1:140.7.1esr-1~deb11u1","1:140.7.1esr-1~deb12u1","1:140.7.1esr-1~deb13u1","1:140.8.0esr-1","1:140.8.0esr-1~deb11u1","1:140.8.0esr-1~deb12u1","1:140.8.0esr-1~deb13u1","1:140.9.0esr-1","1:140.9.0esr-1~deb11u1","1:140.9.0esr-1~deb12u1","1:140.9.0esr-1~deb13u1","1:140.9.1esr-1","1:140.9.1esr-1~deb11u1","1:140.9.1esr-1~deb12u1","1:140.9.1esr-1~deb13u1"]},{"source":"osv","ecosystem":"Mageia:9","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260412.00-1.mga9"}]}],"bundled":17},{"source":"osv","ecosystem":"Mageia:9","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.123.1-1.mga9"}]}],"bundled":17},{"source":"osv","ecosystem":"Mageia:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.mga9"}]}],"bundled":17},{"source":"osv","ecosystem":"Mageia:9","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.mga9"}]}],"bundled":17},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.mga9"}]}],"bundled":17},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.mga9"}]}],"bundled":17},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0-1.oe2203sp4"}]}],"bundled":25},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0-1.oe2403"}]}],"bundled":25},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0-1.oe2403sp1"}]}],"bundled":25},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0-1.oe2403sp3"}]}],"bundled":25},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.0-1.oe2403sp3"}]}],"bundled":30},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_10"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_10"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_10"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_10"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_10"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_10"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_0"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_0"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_0"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_2"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_2"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_2"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_2"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_0"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_0"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_0"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_2"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_2"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_2"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_2"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_2"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_2"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_8"}]}],"bundled":30},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_8"}]}],"bundled":30},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_8"}]}],"bundled":30},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_2"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_2"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_2"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_0"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_0"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_0"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_8"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_0"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_0"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_0"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_4"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-2.el7_9"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-2.el7_9"}]}],"bundled":25},{"source":"osv","ecosystem":"Rocky Linux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_7"}]}],"bundled":25},{"source":"osv","ecosystem":"Rocky Linux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_10"}]}],"bundled":25},{"source":"osv","ecosystem":"Rocky Linux:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_1"}]}],"bundled":25},{"source":"osv","ecosystem":"Rocky Linux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el10_1"}]}],"bundled":25},{"source":"osv","ecosystem":"Rocky Linux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el8_10"}]}],"bundled":25},{"source":"osv","ecosystem":"Rocky Linux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_7"}]}],"bundled":25},{"source":"osv","ecosystem":"Rocky Linux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.0-1.el9_7"}]}],"bundled":25},{"source":"osv","ecosystem":"Rocky Linux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_8"}]}],"bundled":29},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.3.1-0ubuntu3","52.3.1-7fakesync1","52.8.1-0ubuntu0.18.04.1","52.9.1-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs38","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["38.8.0~repack1-0ubuntu1","38.8.0~repack1-0ubuntu3","38.8.0~repack1-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs68","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["68.5.0-1~fakesync","68.5.0-2~fakesync","68.6.0-1","68.6.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.9.1-1build1","52.9.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.11.0-0ubuntu0.22.04.1","102.12.0-0ubuntu0.22.04.1","102.13.0-0ubuntu0.22.04.1","102.15.1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs78","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["78.13.0-1","78.15.0-2","78.15.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["91.5.1-0ubuntu1","91.6.0-1","91.6.0-2","91.7.0-2","91.10.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1","1:102.8.0+build2-0ubuntu0.22.04.1","1:102.9.0+build1-0ubuntu0.22.04.1","1:102.10.0+build2-0ubuntu0.22.04.1","1:102.11.0+build1-0ubuntu0.22.04.1","1:102.13.0+build1-0ubuntu0.22.04.1","1:102.15.0+build1-0ubuntu0.22.04.1","1:102.15.1+build1-0ubuntu0.22.04.1","1:115.3.1+build1-0ubuntu0.22.04.2","1:115.4.1+build1-0ubuntu0.22.04.1","1:115.5.0+build1-0ubuntu0.22.04.1","1:115.6.0+build2-0ubuntu0.22.04.1","1:115.8.1+build1-0ubuntu0.22.04.1","1:115.9.0+build1-0ubuntu0.22.04.1","1:115.10.1+build1-0ubuntu0.22.04.1","1:115.11.0+build2-0ubuntu0.22.04.1","1:115.12.0+build3-0ubuntu0.22.04.1","1:115.13.0+build5-0ubuntu0.22.04.1","1:115.15.0+build1-0ubuntu0.22.04.1","1:115.16.0+build2-0ubuntu0.22.04.1","1:115.18.0+build1-0ubuntu0.22.04.1","1:128.12.0+build1-0ubuntu0.22.04.1","1:140.7.1+build1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.15.1-1","102.15.1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs115","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["115.3.0-0ubuntu1","115.4.0-2","115.5.0-1","115.6.0-1","115.7.0-4","115.8.0-1","115.9.0-1","115.9.0-1build1","115.10.0-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.9.1-1.1"}]}],"bundled":25},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"150.0-1.1"}]}],"bundled":41},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0-1.1"}]}],"bundled":228}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"thunderbird"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2014596","tags":["Permissions Required"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-30/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-31/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-33/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6746","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460112","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6746.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19704","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:17690","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19463","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:10767","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:12285","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19041","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19131","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:10766","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13537","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19655","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19465","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19542","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19466","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:17477","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19467","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:17687","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19468","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:17689","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19461","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19464","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19469","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:17688","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19462","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:10757","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:15892","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19201","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19348","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6746","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-30"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-31"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-33"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34"},{"url":"https://github.com/advisories/GHSA-r37m-3hw5-974w"},{"url":"https://access.redhat.com/security/cve/CVE-2026-6747","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6748","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6749","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6750","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6751","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6752","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6753","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6754","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6757","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6759","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6761","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6762","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6763","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6764","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6765","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6766","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6767","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6769","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6770","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6771","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6772","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6776","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6785","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6786","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460074","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460075","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460076","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460078","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460079","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460085","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460086","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460088","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460092","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460094","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460095","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460096","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460097","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460099","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460101","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460102","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460103","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460104","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460105","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460106","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460107","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460108","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460109","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460110","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460112","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-10757.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-10766.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-111497.html","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-10767.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-12285.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-13537.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-15892.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7320","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7321","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7322","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7323","tags":["report"]},{"url":"https://bugzilla.redhat.com/2463481","tags":["report"]},{"url":"https://bugzilla.redhat.com/2463483","tags":["report"]},{"url":"https://bugzilla.redhat.com/2463484","tags":["report"]},{"url":"https://bugzilla.redhat.com/2463485","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-19348.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-8091.html","tags":["report"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1780952647.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6754","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6769","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8388","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-6746","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0124.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35403","tags":["report"]},{"url":"https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_123.html","tags":["web"]},{"url":"https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_123_1.html","tags":["web"]},{"url":"https://www.firefox.com/en-US/firefox/140.10.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-32/","tags":["advisory"]},{"url":"https://www.firefox.com/en-US/firefox/140.10.1/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-36/","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0125.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35404","tags":["report"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/140.10.0esr/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-34/","tags":["advisory"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/140.10.1esr/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-39/","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2105","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6747","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6748","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6753","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6757","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6759","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6761","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6762","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6763","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6764","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6765","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6766","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6767","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6770","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6771","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6772","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6776","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6786","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2106","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2107","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2108","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2109","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2776","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2780","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5731","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5732","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5734","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460094","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460110","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10757.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6746","tags":["advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6746","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6746","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6747","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6747","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6747","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6748","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6748","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6748","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6749","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6749","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6749","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6750","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6750","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6750","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6751","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6751","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6751","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6752","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6752","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6752","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6753","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6753","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6753","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6754","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6754","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6754","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6757","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6757","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6757","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6759","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6759","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6759","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6761","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6761","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6761","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6762","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6762","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6762","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6763","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6763","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6763","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6764","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6764","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6764","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6765","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6765","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6765","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6766","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6766","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6766","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6767","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6767","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6767","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6769","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6769","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6769","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6770","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6770","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6770","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6771","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6771","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6771","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6772","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6772","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6772","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6776","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6776","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6776","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6785","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6785","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6785","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6786","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6786","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6786","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10766.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10767.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_12285.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13537.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_15892.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17477.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17687.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17688.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17689.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17690.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19041.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19131.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19201.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2463481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2463483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2463484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2463485","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19348.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7320","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-36/#CVE-2026-7320","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-39/#CVE-2026-7320","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7321","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7321","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-36/#CVE-2026-7321","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-39/#CVE-2026-7321","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7322","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-36/#CVE-2026-7322","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-39/#CVE-2026-7322","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7323","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-36/#CVE-2026-7323","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-39/#CVE-2026-7323","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-8091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467699","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-8091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8091","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-36/#CVE-2026-8091","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-39/#CVE-2026-8091","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-42/#CVE-2026-8091","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19461.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19462.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19463.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19464.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19465.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19466.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19467.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19468.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19469.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19542.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19655.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19704.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:10757","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:10766","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:10767","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:12285","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:13537","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:15892","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19201","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19348","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261649-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1262230","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6786","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261650-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261741-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1263110","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7323","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621383-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-6746","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-30/#CVE-2026-6746","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-32/#CVE-2026-6746","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8973","tags":["web"]},{"url":"https://bugzilla.suse.com/1260083","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5734","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-6746","title":"Use-after-free in the DOM: Core \u0026 HTML component","description":"Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.","status":"published","published":"2026-04-21T12:40:44.148Z","modified":"2026-07-15T00:41:08.555Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416","CWE-825"],"updated_at":"2026-11-02T13:49:53.818886Z"}],"euvd":[{"id":"EUVD-2026-24087","description":"Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.","status":"published","published":"2026-04-21T12:40:44Z","modified":"2026-07-15T00:41:08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:19:56.918546Z"}],"ghsa":[{"id":"GHSA-r37m-3hw5-974w","title":"Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 150,...","description":"Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.","status":"published","published":"2026-04-21T15:32:19Z","modified":"2026-06-30T03:36:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-416","CWE-825"],"updated_at":"2026-11-02T15:09:04.668745Z"}],"nvd":[{"id":"CVE-2026-6746","description":"Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.","status":"published","published":"2026-04-21T13:16:20.72Z","modified":"2026-10-26T22:10:00.163Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-416","CWE-825"],"updated_at":"2026-11-02T14:12:15.120927Z"}],"osv":[{"id":"DEBIAN-CVE-2026-6746","description":"Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.","status":"published","published":"2026-04-21T13:16:20.72Z","modified":"2026-10-27T09:47:41.064489364Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:01.68444Z"},{"id":"OESA-2026-2105","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nUse-after-free in the DOM: Core \u0026amp; HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6746)\n\nUse-after-free vulnerability in the WebRTC component of Firefox. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6747)\n\nUninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6748)\n\nInformation disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6749)\n\nPrivilege escalation vulnerability in the WebRender graphics component of Firefox browser. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6750)\n\nAn uninitialized memory vulnerability exists in the Audio/Video: Web Codecs component of Firefox browser. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6751)\n\nIncorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6752)\n\nIncorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6753)\n\nA use-after-free vulnerability exists in the JavaScript Engine component of Mozilla Firefox. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause the application to crash. This vulnerability has been fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6754)\n\nInvalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6757)\n\nUse-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6759)\n\nPrivilege escalation in the Networking component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6761)\n\nSpoofing issue in the DOM: Core \u0026amp; HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6762)\n\nMitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6763)\n\nIncorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6764)\n\nInformation disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6765)\n\nIncorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6766)\n\nOther issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6767)\n\nPrivilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6769)\n\nOther issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6770)\n\nMitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6771)\n\nIncorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6772)\n\nIncorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6776)\n\nMemory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6785)\n\nMemory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6786)","status":"published","published":"2026-04-25T11:11:06Z","modified":"2026-08-18T01:19:49.793124776Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2106","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nUse-after-free in the DOM: Core \u0026amp; HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6746)\n\nUse-after-free vulnerability in the WebRTC component of Firefox. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6747)\n\nUninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6748)\n\nInformation disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6749)\n\nPrivilege escalation vulnerability in the WebRender graphics component of Firefox browser. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6750)\n\nAn uninitialized memory vulnerability exists in the Audio/Video: Web Codecs component of Firefox browser. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6751)\n\nIncorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6752)\n\nIncorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6753)\n\nA use-after-free vulnerability exists in the JavaScript Engine component of Mozilla Firefox. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause the application to crash. This vulnerability has been fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6754)\n\nInvalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6757)\n\nUse-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6759)\n\nPrivilege escalation in the Networking component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6761)\n\nSpoofing issue in the DOM: Core \u0026amp; HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6762)\n\nMitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6763)\n\nIncorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6764)\n\nInformation disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6765)\n\nIncorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6766)\n\nOther issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6767)\n\nPrivilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6769)\n\nOther issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6770)\n\nMitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6771)\n\nIncorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6772)\n\nIncorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6776)\n\nMemory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6785)\n\nMemory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6786)","status":"published","published":"2026-04-25T11:11:06Z","modified":"2026-08-18T01:19:56.450700497Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2107","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nUse-after-free in the DOM: Core \u0026amp; HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6746)\n\nUse-after-free vulnerability in the WebRTC component of Firefox. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6747)\n\nUninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6748)\n\nInformation disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6749)\n\nPrivilege escalation vulnerability in the WebRender graphics component of Firefox browser. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6750)\n\nAn uninitialized memory vulnerability exists in the Audio/Video: Web Codecs component of Firefox browser. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6751)\n\nIncorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6752)\n\nIncorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6753)\n\nA use-after-free vulnerability exists in the JavaScript Engine component of Mozilla Firefox. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause the application to crash. This vulnerability has been fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6754)\n\nInvalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6757)\n\nUse-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6759)\n\nPrivilege escalation in the Networking component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6761)\n\nSpoofing issue in the DOM: Core \u0026amp; HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6762)\n\nMitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6763)\n\nIncorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6764)\n\nInformation disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6765)\n\nIncorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6766)\n\nOther issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6767)\n\nPrivilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6769)\n\nOther issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6770)\n\nMitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6771)\n\nIncorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6772)\n\nIncorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6776)\n\nMemory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6785)\n\nMemory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6786)","status":"published","published":"2026-04-25T11:11:06Z","modified":"2026-08-18T01:19:56.435573578Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2108","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nUse-after-free in the DOM: Core \u0026amp; HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6746)\n\nUse-after-free vulnerability in the WebRTC component of Firefox. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6747)\n\nUninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6748)\n\nInformation disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6749)\n\nPrivilege escalation vulnerability in the WebRender graphics component of Firefox browser. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6750)\n\nAn uninitialized memory vulnerability exists in the Audio/Video: Web Codecs component of Firefox browser. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6751)\n\nIncorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6752)\n\nIncorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6753)\n\nA use-after-free vulnerability exists in the JavaScript Engine component of Mozilla Firefox. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause the application to crash. This vulnerability has been fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6754)\n\nInvalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6757)\n\nUse-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6759)\n\nPrivilege escalation in the Networking component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6761)\n\nSpoofing issue in the DOM: Core \u0026amp; HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6762)\n\nMitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6763)\n\nIncorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6764)\n\nInformation disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6765)\n\nIncorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6766)\n\nOther issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6767)\n\nPrivilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6769)\n\nOther issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6770)\n\nMitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6771)\n\nIncorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6772)\n\nIncorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6776)\n\nMemory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6785)\n\nMemory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6786)","status":"published","published":"2026-04-25T11:11:06Z","modified":"2026-08-18T01:19:56.436903669Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2109","title":"thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\r\n\r\nSecurity Fix(es):\n\nSandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.(CVE-2026-2776)\n\nPrivilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.(CVE-2026-2780)\n\nMemory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 149.0.2, Firefox ESR \u0026lt; 115.34.1, and Firefox ESR \u0026lt; 140.9.1.(CVE-2026-5731)\n\nIncorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability affects Firefox \u0026lt; 149.0.2 and Firefox ESR \u0026lt; 140.9.1.(CVE-2026-5732)\n\nMemory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 149.0.2 and Firefox ESR \u0026lt; 140.9.1.(CVE-2026-5734)\n\nUse-after-free in the DOM: Core \u0026amp; HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6746)\n\nUse-after-free vulnerability in the WebRTC component of Firefox. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6747)\n\nUninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6748)\n\nInformation disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6749)\n\nPrivilege escalation vulnerability in the WebRender graphics component of Firefox browser. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6750)\n\nAn uninitialized memory vulnerability exists in the Audio/Video: Web Codecs component of Firefox browser. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6751)\n\nIncorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6752)\n\nIncorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6753)\n\nA use-after-free vulnerability exists in the JavaScript Engine component of Mozilla Firefox. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause the application to crash. This vulnerability has been fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6754)\n\nInvalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6757)\n\nA use-after-free vulnerability exists in the Widget: Cocoa component of Mozilla Firefox and Thunderbird. The vulnerability stems from the program referencing memory after it has been freed. An attacker could exploit this vulnerability to cause the application to crash, read unexpected values, or execute arbitrary code, thereby affecting the confidentiality, integrity, and availability of the system. This vulnerability affects Firefox versions up to 149 and corresponding versions of Thunderbird.(CVE-2026-6759)\n\nA privilege escalation vulnerability exists in the Networking component of Mozilla Firefox and Thunderbird. An attacker could potentially exploit this vulnerability to escalate privileges, which may lead to remote code execution, impacting confidentiality, integrity, and availability. This vulnerability affects Firefox versions up to 149 and corresponding versions of Thunderbird.(CVE-2026-6761)\n\nSpoofing issue in the DOM: Core \u0026amp; HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.(CVE-2026-6762)\n\nA mitigation bypass vulnerability exists in the File Handling component of Mozilla Firefox and Thunderbird. This vulnerability could allow an attacker to bypass security mitigations, potentially impacting the confidentiality, integrity, and availability of the system. According to VulDB, this vulnerability is rated as critical. Affected versions include Firefox up to version 149, Firefox ESR prior to 140.10, Thunderbird up to version 149, and Thunderbird ESR prior to 140.10.(CVE-2026-6763)\n\nAn incorrect boundary condition vulnerability exists in the DOM (Document Object Model) \u0026apos;Device Interfaces\u0026apos; component of Mozilla Firefox and Thunderbird. This vulnerability is classified under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), which is a memory corruption issue. An attacker could potentially exploit this by tricking a user into visiting a specially crafted web page, causing the application to read from or write to a memory location outside the intended boundary of a buffer. This impacts the confidentiality, integrity, and availability of the affected system.(CVE-2026-6764)\n\nAn information disclosure vulnerability (CWE-200) exists in the Form Autofill component of Mozilla Firefox. This vulnerability could allow sensitive information to be exposed to unauthorized actors, posing a threat to data confidentiality. This vulnerability affects Firefox versions up to 149, Firefox ESR versions prior to 140.10, Thunderbird versions up to 149, and Thunderbird ESR versions prior to 140.10.(CVE-2026-6765)\n\nAn incorrect boundary condition vulnerability exists in the Network Security Services (NSS) library used by Mozilla Firefox, Firefox ESR, and Thunderbird. An attacker could exploit this vulnerability to read from or write to a memory location outside the intended boundary of a buffer, leading to memory corruption. This could result in application crashes, denial of service, or potentially arbitrary code execution, threatening confidentiality, integrity, and availability.(CVE-2026-6766)\n\nA security vulnerability exists in the Network Security Services (NSS) library used by Mozilla Firefox and Thunderbird. This vulnerability is rated as critical and could allow an attacker to remotely execute arbitrary code, thereby compromising the confidentiality, integrity, and availability of the system. Affected versions include Firefox up to 149 and earlier, as well as corresponding versions of Firefox ESR and Thunderbird.(CVE-2026-6767)\n\nA privilege escalation vulnerability exists in the Debugger component of Mozilla Firefox and Thunderbird. An attacker could potentially exploit this vulnerability to execute arbitrary code or escalate privileges on affected systems, impacting confidentiality, integrity, and availability. This vulnerability affects Firefox versions up to 149 and corresponding versions of Thunderbird.(CVE-2026-6769)\n\nA critical vulnerability exists in the Storage: IndexedDB component of Mozilla Firefox (web browser) and Thunderbird (mail client). An attacker could potentially exploit this vulnerability to execute remote code on affected systems, impacting confidentiality, integrity, and availability. This vulnerability affects Firefox versions up to 149, Firefox ESR versions prior to 140.10, Thunderbird versions up to 149, and Thunderbird ESR versions prior to 140.10.(CVE-2026-6770)\n\nA mitigation bypass vulnerability exists in the DOM (Document Object Model) security component of Mozilla Firefox and Thunderbird. This vulnerability affects Firefox versions up to 149, Firefox ESR versions prior to 140.10, Thunderbird versions up to 149, and Thunderbird ESR versions prior to 140.10. An attacker could potentially exploit this vulnerability to bypass certain security mechanisms, posing a threat to system integrity.(CVE-2026-6771)\n\nAn incorrect boundary conditions vulnerability (CWE-119) exists in the Network Security Services (NSS) library used by Mozilla Firefox. The vulnerability occurs when the product performs operations on a memory buffer, allowing it to read from or write to a memory location outside the intended boundary of the buffer, leading to memory corruption. This impacts confidentiality, integrity, and availability. Affected versions include Firefox up to 149, Firefox ESR prior to 115.35, Firefox ESR prior to 140.10, Thunderbird prior to 150, and Thunderbird prior to 140.10.(CVE-2026-6772)\n\nAn incorrect boundary conditions vulnerability exists in the WebRTC Networking component of Mozilla Firefox and Thunderbird. This vulnerability is classified as critical, with the root cause being CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer. An attacker could exploit this vulnerability to read from or write to a memory location outside the intended boundary of a buffer, leading to memory corruption. This impacts the confidentiality, integrity, and availability of the system. This vulnerability affects Firefox versions up to 149, Firefox ESR versions prior to 140.10, Thunderbird versions up to 149, and Thunderbird ESR versions prior to 140.10.(CVE-2026-6776)\n\nMemory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.(CVE-2026-6785)\n\nMemory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.(CVE-2026-6786)","status":"published","published":"2026-04-25T11:11:06Z","modified":"2026-08-18T01:19:56.439268018Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"RHSA-2026:10757","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-04-28T10:07:58Z","modified":"2026-07-15T10:03:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:10766","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-04-28T10:07:59Z","modified":"2026-07-15T10:03:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:10767","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-04-28T10:08:00Z","modified":"2026-07-15T10:03:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:12285","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-01T10:22:40Z","modified":"2026-07-15T10:04:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:13537","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-05T10:11:50Z","modified":"2026-07-15T10:04:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:15892","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-11T10:06:11Z","modified":"2026-07-15T10:04:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:17477","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-15T10:15:00Z","modified":"2026-07-15T10:05:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:17687","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-15T10:15:14Z","modified":"2026-07-15T10:05:07Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:17688","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-15T10:15:15Z","modified":"2026-07-15T10:05:08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:17689","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-15T10:15:15Z","modified":"2026-07-15T10:05:08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:17690","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-15T10:15:16Z","modified":"2026-07-15T10:05:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19041","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-20T10:09:42Z","modified":"2026-07-15T10:05:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19131","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-20T10:09:56Z","modified":"2026-07-15T10:05:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19201","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-20T10:10:18Z","modified":"2026-07-15T10:05:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19348","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-20T10:10:28Z","modified":"2026-07-29T10:05:32Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19461","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-20T10:10:48Z","modified":"2026-07-15T10:05:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19462","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-20T10:10:49Z","modified":"2026-07-15T10:05:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19463","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-20T10:10:50Z","modified":"2026-07-15T10:05:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19464","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-20T10:10:50Z","modified":"2026-07-15T10:05:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19465","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-20T10:10:51Z","modified":"2026-07-15T10:05:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19466","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-20T10:10:51Z","modified":"2026-07-15T10:05:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19467","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-20T10:10:52Z","modified":"2026-07-15T10:05:48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19468","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-20T10:10:52Z","modified":"2026-07-15T10:05:48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19469","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-20T10:10:53Z","modified":"2026-07-15T10:05:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19542","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-20T10:10:57Z","modified":"2026-07-15T10:05:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19655","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-21T10:08:30Z","modified":"2026-07-15T10:05:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19704","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-21T10:08:33Z","modified":"2026-07-15T10:05:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RLSA-2026:10757","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n\n* firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n\n* firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n\n* firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n\n* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n\n* firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n\n* firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n\n* firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n\n* firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n\n* firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n\n* firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n\n* firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n\n* firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n\n* firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n\n* firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-28T12:03:39.779234Z","modified":"2026-04-28T12:30:06.215952Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:10766","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n\n* firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n\n* firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n\n* firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n\n* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n\n* firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n\n* firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n\n* firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n\n* firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n\n* firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n\n* firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n\n* firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n\n* firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n\n* firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n\n* firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-30T18:01:05.380956Z","modified":"2026-04-30T18:24:59.87872Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:10767","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n\n* firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n\n* firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n\n* firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n\n* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n\n* firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n\n* firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n\n* firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n\n* firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n\n* firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n\n* firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n\n* firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n\n* firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n\n* firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n\n* firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-28T12:06:44.835475Z","modified":"2026-04-28T12:30:28.003437Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:12285","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n\n* firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n\n* firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n\n* firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n\n* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n\n* firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n\n* firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n\n* firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n\n* firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n\n* firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n\n* firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n\n* firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n\n* firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n\n* firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n\n* firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-07T12:06:53.645622Z","modified":"2026-05-07T12:30:12.586921Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:13537","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n\n* firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n\n* firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n\n* firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n\n* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n\n* firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n\n* firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n\n* firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n\n* firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n\n* firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n\n* firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n\n* firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n\n* firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n\n* firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n\n* firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-07T06:00:59.922786Z","modified":"2026-05-07T06:30:14.501352Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:15892","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n\n* firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n\n* firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n\n* firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n\n* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n\n* firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n\n* firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n\n* firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n\n* firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n\n* firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n\n* firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n\n* firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n\n* firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n\n* firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n\n* firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-13T12:03:42.485295Z","modified":"2026-05-13T12:33:13.187518Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:19201","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n\n* firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n\n* firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n\n* firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n\n* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n\n* firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n\n* firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n\n* firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n\n* firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n\n* firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n\n* firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n\n* firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n\n* firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n\n* firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n\n* firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-20T00:03:50.188648Z","modified":"2026-05-20T00:30:26.997370213Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:19348","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n\n* firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n\n* firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n\n* firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n\n* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n\n* firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n\n* firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n\n* firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n\n* firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n\n* firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n\n* firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n\n* firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n\n* firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n\n* firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n\n* firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)\n\n* firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)\n\n* firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)\n\n* firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-28T15:43:06.024531Z","modified":"2026-05-28T16:00:29.256120597Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2026-6746","description":"Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.","status":"published","published":"2026-04-21T13:16:00Z","modified":"2026-06-30T18:18:08.53927559Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:53.710209Z"},{"id":"ALSA-2026:10757","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n  * firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n  * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n  * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n  * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n  * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n  * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n  * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n  * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n  * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n  * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n  * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n  * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n  * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-27T00:00:00Z","modified":"2026-10-29T11:32:30.983717853Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:10766","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n  * firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n  * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n  * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n  * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n  * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n  * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n  * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n  * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n  * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n  * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n  * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n  * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n  * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-27T00:00:00Z","modified":"2026-10-29T11:12:08.909366802Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:10767","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n  * firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n  * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n  * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n  * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n  * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n  * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n  * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n  * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n  * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n  * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n  * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n  * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n  * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-27T00:00:00Z","modified":"2026-10-29T11:58:13.212395Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:12285","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n  * firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n  * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n  * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n  * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n  * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n  * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n  * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n  * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n  * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n  * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n  * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n  * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n  * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-30T00:00:00Z","modified":"2026-10-29T11:58:12.531532Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:13537","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n  * firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n  * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n  * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n  * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n  * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n  * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n  * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n  * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n  * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n  * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n  * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n  * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n  * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-04T00:00:00Z","modified":"2026-10-29T11:12:05.167170741Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:15892","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n  * firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n  * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n  * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n  * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n  * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n  * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n  * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n  * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n  * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n  * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n  * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n  * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n  * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-11T00:00:00Z","modified":"2026-10-29T11:32:20.720619738Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:19348","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n  * firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n  * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n  * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n  * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n  * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n  * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n  * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n  * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n  * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n  * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n  * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n  * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n  * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)\n  * firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)\n  * firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)\n  * firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-11-06T12:00:03.70909716Z","updated_at":"2026-11-06T12:12:56.168821Z"},{"id":"CLSA-2026-1780952647","title":"thunderbird: Fix of 8 CVEs","description":"- CVE-2026-6746: HTMLSlotElement - fix manual slot reassignment across different shadow roots (Bug 2014596)\n- CVE-2026-6749: ImageEncoder use mapped stride and surface size to avoid OOB read (Bug 2022610)\n- CVE-2026-6752: libwebrtc - truncate RTP CSRC list to RFC 3550 spec maximum (15)\n- CVE-2026-6785: prevent use-after-free in nsUnknownDecoder::CheckListenerChain (Bug 2036929)\n- CVE-2026-8388: SpiderMonkey JIT - widen RecoverOffset to uint64_t to prevent overflow in Ion snapshot encoding (Bug 2036978)","status":"published","published":"2026-06-09T08:38:05Z","modified":"2026-10-26T09:30:18.488674333Z","updated_at":"2026-11-02T15:43:45.445699Z"}]},"sources_more":{"osv":11}}