{"id":"CVE-2026-7321","aliases":["ALSA-2026:19153","ALSA-2026:19157","ALSA-2026:19348","ALSA-2026:19370","ALSA-2026:19588","ALSA-2026:20586","CLSA-2026-1781619768","DEBIAN-CVE-2026-7321","EUVD-2026-26058","GHSA-jjvw-q2ff-g9g3","OESA-2026-2132","OESA-2026-2133","OESA-2026-2134","OESA-2026-2246","OESA-2026-2275","RHSA-2026:19153","RHSA-2026:19157","RHSA-2026:19348","RHSA-2026:19370","RHSA-2026:19588","RHSA-2026:20586","RHSA-2026:21743","RHSA-2026:22324","RHSA-2026:22408","RHSA-2026:22409","RHSA-2026:22410","RHSA-2026:22708","RHSA-2026:22712","RHSA-2026:22847","RHSA-2026:24345","RHSA-2026:24717","RHSA-2026:24718","RHSA-2026:24719","RHSA-2026:24721","RHSA-2026:24844","RHSA-2026:24846","RHSA-2026:25014","RLSA-2026:19153","RLSA-2026:19348","RLSA-2026:19370","RLSA-2026:19588","RLSA-2026:20586","SUSE-SU-2026:1741-1","SUSE-SU-2026:1829-1","SUSE-SU-2026:1830-1","SUSE-SU-2026:21541-1","openSUSE-SU-2026:10661-1","openSUSE-SU-2026:10687-1","openSUSE-SU-2026:20667-1","openSUSE-SU-2026:21168-1"],"status":"published","title":"Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component","description":"Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.","severity":{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00258,"percentile":0.17605,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2026-04-28T13:49:12Z","modified":"2026-11-06T12:00:03Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"thunderbird","fixed_in":["115.4.1-1.el9_2.alma.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["140.10.1esr-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["140.10.1esr-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["140.10.1esr-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"thunderbird","fixed_in":["1:140.10.1esr-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"thunderbird","fixed_in":["1:140.10.1esr-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:140.10.1esr-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.el10_2.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.el9_8.alma.1"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.el9_8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.el9_8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.el8_10.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.el8_10.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.4.1-1.el9_2.alma.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1esr-1~deb12u1"}]}],"versions":["102.11.0esr-1","102.12.0esr-1","102.12.0esr-1~deb10u1","102.12.0esr-1~deb11u1","102.12.0esr-1~deb12u1","102.13.0esr-1","102.13.0esr-1~deb10u1","102.13.0esr-1~deb11u1","102.13.0esr-1~deb12u1","102.14.0esr-1~deb10u1","102.14.0esr-1~deb11u1","102.14.0esr-1~deb12u1","102.15.0esr-1~deb10u1","102.15.0esr-1~deb11u1","102.15.0esr-1~deb12u1","102.15.1esr-1~deb10u1","102.15.1esr-1~deb11u1","102.15.1esr-1~deb12u1","115.0.2esr-1","115.1.0esr-1","115.10.0esr-1","115.10.0esr-1~deb10u1","115.10.0esr-1~deb11u1","115.10.0esr-1~deb12u1","115.11.0esr-1","115.11.0esr-1~deb10u1","115.11.0esr-1~deb11u1","115.11.0esr-1~deb12u1","115.12.0esr-1","115.12.0esr-1~deb10u1","115.12.0esr-1~deb11u1","115.12.0esr-1~deb12u1","115.13.0esr-1","115.13.0esr-1~deb11u1","115.13.0esr-1~deb12u1","115.13.0esr-2","115.14.0esr-1","115.14.0esr-1~deb11u1","115.14.0esr-1~deb12u1","115.15.0esr-1","115.15.0esr-1~deb11u1","115.15.0esr-1~deb12u1","115.2.0esr-1","115.2.1esr-1","115.3.0esr-1","115.3.0esr-1~deb10u1","115.3.0esr-1~deb11u1","115.3.0esr-1~deb12u1","115.3.1esr-1~deb10u1","115.3.1esr-1~deb11u1","115.4.0esr-1","115.4.0esr-1~deb10u1","115.4.0esr-1~deb11u1","115.4.0esr-1~deb12u1","115.5.0esr-1","115.5.0esr-1~deb10u1","115.5.0esr-1~deb11u1","115.5.0esr-1~deb12u1","115.6.0esr-1","115.6.0esr-1~deb10u1","115.6.0esr-1~deb11u1","115.6.0esr-1~deb12u1","115.7.0esr-1","115.7.0esr-1~deb10u1","115.7.0esr-1~deb11u1","115.7.0esr-1~deb12u1","115.8.0esr-1","115.8.0esr-1~deb10u1","115.8.0esr-1~deb11u1","115.8.0esr-1~deb12u1","115.9.0esr-1","115.9.0esr-1~deb11u1","115.9.0esr-1~deb12u1","115.9.0esr-2","115.9.1esr-1","115.9.1esr-1~deb10u1","115.9.1esr-1~deb11u1","115.9.1esr-1~deb12u1","128.10.0esr-1","128.10.0esr-1~deb12u1","128.10.1esr-1","128.10.1esr-1~deb11u1","128.10.1esr-1~deb12u1","128.11.0esr-1","128.11.0esr-1~deb11u1","128.11.0esr-1~deb12u1","128.12.0esr-1","128.12.0esr-1~deb11u1","128.12.0esr-1~deb12u1","128.13.0esr-1","128.13.0esr-1~deb11u1","128.13.0esr-1~deb12u1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","128.3.0esr-1","128.3.0esr-1~deb11u1","128.3.0esr-1~deb11u2","128.3.0esr-1~deb12u1","128.3.0esr-2","128.3.1esr-1","128.3.1esr-1~deb11u1","128.3.1esr-1~deb12u1","128.3.1esr-2","128.4.0esr-1","128.4.0esr-1~deb11u1","128.4.0esr-1~deb12u1","128.5.0esr-1","128.5.0esr-1~deb11u1","128.5.0esr-1~deb12u1","128.5.1esr-1","128.6.0esr-1","128.6.0esr-1~deb11u1","128.6.0esr-1~deb11u2","128.6.0esr-1~deb11u3","128.6.0esr-1~deb12u1","128.6.0esr-2","128.6.0esr-3","128.6.0esr-4","128.7.0esr-1","128.7.0esr-1~deb11u1","128.7.0esr-1~deb12u1","128.8.0esr-1","128.8.0esr-1~deb11u1","128.8.0esr-1~deb12u1","128.9.0esr-1","128.9.0esr-1~deb11u1","128.9.0esr-1~deb12u1","128.9.0esr-2","140.10.0esr-1","140.10.0esr-1~deb11u1","140.10.0esr-1~deb12u1","140.10.0esr-1~deb13u1","140.10.1esr-1~deb11u1","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1","140.5.0esr-1~deb13u1","140.6.0esr-1","140.6.0esr-1~deb11u1","140.6.0esr-1~deb12u1","140.6.0esr-1~deb13u1","140.7.0esr-1","140.7.0esr-1~deb11u1","140.7.0esr-1~deb12u1","140.7.0esr-1~deb13u1","140.8.0esr-1","140.8.0esr-1~deb11u1","140.8.0esr-1~deb12u1","140.8.0esr-1~deb13u1","140.9.0esr-1","140.9.0esr-1~deb11u1","140.9.0esr-1~deb12u1","140.9.0esr-1~deb13u1","140.9.1esr-1","140.9.1esr-1~deb11u1","140.9.1esr-1~deb12u1","140.9.1esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1esr-1~deb13u1"}]}],"versions":["128.13.0esr-1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","140.10.0esr-1","140.10.0esr-1~deb11u1","140.10.0esr-1~deb12u1","140.10.0esr-1~deb13u1","140.10.1esr-1~deb11u1","140.10.1esr-1~deb12u1","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1","140.5.0esr-1~deb13u1","140.6.0esr-1","140.6.0esr-1~deb11u1","140.6.0esr-1~deb12u1","140.6.0esr-1~deb13u1","140.7.0esr-1","140.7.0esr-1~deb11u1","140.7.0esr-1~deb12u1","140.7.0esr-1~deb13u1","140.8.0esr-1","140.8.0esr-1~deb11u1","140.8.0esr-1~deb12u1","140.8.0esr-1~deb13u1","140.9.0esr-1","140.9.0esr-1~deb11u1","140.9.0esr-1~deb12u1","140.9.0esr-1~deb13u1","140.9.1esr-1","140.9.1esr-1~deb11u1","140.9.1esr-1~deb12u1","140.9.1esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1esr-1"}]}],"versions":["128.13.0esr-1","128.14.0esr-1","128.14.0esr-1~deb11u1","128.14.0esr-1~deb12u1","128.14.0esr-1~deb13u1","140.10.0esr-1","140.10.0esr-1~deb11u1","140.10.0esr-1~deb12u1","140.10.0esr-1~deb13u1","140.10.1esr-1~deb11u1","140.10.1esr-1~deb12u1","140.10.1esr-1~deb13u1","140.3.0esr-1","140.3.0esr-1~deb11u1","140.3.0esr-1~deb11u2","140.3.0esr-1~deb12u1","140.3.0esr-1~deb13u1","140.3.0esr-2","140.3.1esr-1","140.3.1esr-1~deb11u1","140.3.1esr-1~deb12u1","140.3.1esr-1~deb13u1","140.3.1esr-2","140.4.0esr-1","140.4.0esr-1~deb11u1","140.4.0esr-1~deb12u1","140.4.0esr-1~deb13u1","140.5.0esr-1","140.5.0esr-1~deb11u1","140.5.0esr-1~deb12u1","140.5.0esr-1~deb13u1","140.6.0esr-1","140.6.0esr-1~deb11u1","140.6.0esr-1~deb12u1","140.6.0esr-1~deb13u1","140.7.0esr-1","140.7.0esr-1~deb11u1","140.7.0esr-1~deb12u1","140.7.0esr-1~deb13u1","140.8.0esr-1","140.8.0esr-1~deb11u1","140.8.0esr-1~deb12u1","140.8.0esr-1~deb13u1","140.9.0esr-1","140.9.0esr-1~deb11u1","140.9.0esr-1~deb12u1","140.9.0esr-1~deb13u1","140.9.1esr-1","140.9.1esr-1~deb11u1","140.9.1esr-1~deb12u1","140.9.1esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.10.1esr-1~deb12u1"}]}],"versions":["1:102.11.0-1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1","1:102.15.0-1~deb12u1","1:102.15.1-1~deb10u1","1:102.15.1-1~deb11u1","1:102.15.1-1~deb12u1","1:103.0~b5-1","1:104.0~b2-1","1:110.0~b4-1","1:112.0~b1-1","1:113.0~b3-1","1:114.0~b2-1","1:115.0-1","1:115.0.1-1","1:115.0.1-2","1:115.0~b4-1","1:115.0~b6-1","1:115.1.0-1","1:115.1.1-1","1:115.10.1-1","1:115.10.1-1~deb10u1","1:115.10.1-1~deb11u1","1:115.10.1-1~deb12u1","1:115.11.0-1","1:115.11.0-1~deb10u1","1:115.11.0-1~deb11u1","1:115.11.0-1~deb12u1","1:115.12.0-1","1:115.12.0-1~deb10u1","1:115.12.0-1~deb11u1","1:115.12.0-1~deb12u1","1:115.13.0-1","1:115.13.0-1~deb11u1","1:115.13.0-1~deb12u1","1:115.14.0-1~deb11u1","1:115.14.0-1~deb12u1","1:115.15.0-1~deb11u1","1:115.15.0-1~deb12u1","1:115.16.0esr-1~deb11u1","1:115.16.0esr-1~deb12u1","1:115.2.0-1","1:115.2.2-1","1:115.3.0-1","1:115.3.0-1~deb12u1","1:115.3.1-1","1:115.3.1-1~deb10u1","1:115.3.1-1~deb11u1","1:115.3.1-1~deb12u1","1:115.4.1-1","1:115.4.1-1~deb10u1","1:115.4.1-1~deb11u1","1:115.4.1-1~deb12u1","1:115.5.0-1","1:115.5.0-1~deb10u1","1:115.5.0-1~deb11u1","1:115.5.0-1~deb12u1","1:115.5.1-1","1:115.5.2-1","1:115.6.0-1","1:115.6.0-1~deb10u1","1:115.6.0-1~deb11u1","1:115.6.0-1~deb12u1","1:115.7.0-1","1:115.7.0-1~deb10u1","1:115.7.0-1~deb11u1","1:115.7.0-1~deb12u1","1:115.8.0-1","1:115.8.0-1~deb10u1","1:115.8.0-1~deb11u1","1:115.8.0-1~deb12u1","1:115.8.1-1","1:115.9.0-1","1:115.9.0-1~deb10u1","1:115.9.0-1~deb11u1","1:115.9.0-1~deb12u1","1:116.0~b7-1","1:117.0~b5-1","1:120.0~b1-1","1:121.0~b3-1","1:122.0~b2-1","1:124.0~b5-1","1:125.0~b3-1","1:127.0~b5-1","1:128.0esr-1","1:128.0~b5-1","1:128.1.0esr-1","1:128.1.1esr-1","1:128.10.0esr-1","1:128.10.0esr-1~deb11u1","1:128.10.0esr-1~deb12u1","1:128.10.1esr-1","1:128.10.1esr-1~deb11u1","1:128.10.1esr-1~deb12u1","1:128.11.0esr-1","1:128.11.0esr-1~deb11u1","1:128.11.0esr-1~deb12u1","1:128.12.0esr-1","1:128.12.0esr-1~deb11u1","1:128.12.0esr-1~deb12u1","1:128.13.0esr-1","1:128.13.0esr-1~deb11u1","1:128.13.0esr-1~deb12u1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:128.2.0esr-1","1:128.2.1esr-1","1:128.2.3esr-1","1:128.3.0esr-1","1:128.3.2esr-1","1:128.4.0esr-1","1:128.4.0esr-1~deb11u1","1:128.4.0esr-1~deb12u1","1:128.4.2esr-1","1:128.4.3esr-1","1:128.4.3esr-1~deb11u1","1:128.4.3esr-1~deb12u1","1:128.5.0esr-1","1:128.5.0esr-1~deb11u1","1:128.5.0esr-1~deb12u1","1:128.5.2esr-1","1:128.6.0esr-1","1:128.6.0esr-1~deb11u1","1:128.6.0esr-1~deb12u1","1:128.7.0esr-1","1:128.7.0esr-1~deb11u1","1:128.7.0esr-1~deb12u1","1:128.8.0esr-1","1:128.8.0esr-1~deb11u1","1:128.8.0esr-1~deb12u1","1:128.9.0esr-1","1:128.9.0esr-1~deb11u1","1:128.9.0esr-1~deb12u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.10.0esr-1","1:140.10.0esr-1~deb11u1","1:140.10.0esr-1~deb12u1","1:140.10.0esr-1~deb13u1","1:140.10.1esr-1~deb11u1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1","1:140.5.0esr-1~deb13u1","1:140.6.0esr-1","1:140.6.0esr-1~deb11u1","1:140.6.0esr-1~deb12u1","1:140.6.0esr-1~deb13u1","1:140.7.0esr-1","1:140.7.0esr-1~deb11u1","1:140.7.0esr-1~deb12u1","1:140.7.0esr-1~deb13u1","1:140.7.1esr-1","1:140.7.1esr-1~deb11u1","1:140.7.1esr-1~deb12u1","1:140.7.1esr-1~deb13u1","1:140.8.0esr-1","1:140.8.0esr-1~deb11u1","1:140.8.0esr-1~deb12u1","1:140.8.0esr-1~deb13u1","1:140.9.0esr-1","1:140.9.0esr-1~deb11u1","1:140.9.0esr-1~deb12u1","1:140.9.0esr-1~deb13u1","1:140.9.1esr-1","1:140.9.1esr-1~deb11u1","1:140.9.1esr-1~deb12u1","1:140.9.1esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.10.1esr-1~deb13u1"}]}],"versions":["1:128.13.0esr-1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.10.0esr-1","1:140.10.0esr-1~deb11u1","1:140.10.0esr-1~deb12u1","1:140.10.0esr-1~deb13u1","1:140.10.1esr-1~deb11u1","1:140.10.1esr-1~deb12u1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1","1:140.5.0esr-1~deb13u1","1:140.6.0esr-1","1:140.6.0esr-1~deb11u1","1:140.6.0esr-1~deb12u1","1:140.6.0esr-1~deb13u1","1:140.7.0esr-1","1:140.7.0esr-1~deb11u1","1:140.7.0esr-1~deb12u1","1:140.7.0esr-1~deb13u1","1:140.7.1esr-1","1:140.7.1esr-1~deb11u1","1:140.7.1esr-1~deb12u1","1:140.7.1esr-1~deb13u1","1:140.8.0esr-1","1:140.8.0esr-1~deb11u1","1:140.8.0esr-1~deb12u1","1:140.8.0esr-1~deb13u1","1:140.9.0esr-1","1:140.9.0esr-1~deb11u1","1:140.9.0esr-1~deb12u1","1:140.9.0esr-1~deb13u1","1:140.9.1esr-1","1:140.9.1esr-1~deb11u1","1:140.9.1esr-1~deb12u1","1:140.9.1esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.10.1esr-1"}]}],"versions":["1:128.13.0esr-1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.10.0esr-1","1:140.10.0esr-1~deb11u1","1:140.10.0esr-1~deb12u1","1:140.10.0esr-1~deb13u1","1:140.10.1esr-1~deb11u1","1:140.10.1esr-1~deb12u1","1:140.10.1esr-1~deb13u1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1","1:140.5.0esr-1~deb13u1","1:140.6.0esr-1","1:140.6.0esr-1~deb11u1","1:140.6.0esr-1~deb12u1","1:140.6.0esr-1~deb13u1","1:140.7.0esr-1","1:140.7.0esr-1~deb11u1","1:140.7.0esr-1~deb12u1","1:140.7.0esr-1~deb13u1","1:140.7.1esr-1","1:140.7.1esr-1~deb11u1","1:140.7.1esr-1~deb12u1","1:140.7.1esr-1~deb13u1","1:140.8.0esr-1","1:140.8.0esr-1~deb11u1","1:140.8.0esr-1~deb12u1","1:140.8.0esr-1~deb13u1","1:140.9.0esr-1","1:140.9.0esr-1~deb11u1","1:140.9.0esr-1~deb12u1","1:140.9.0esr-1~deb13u1","1:140.9.1esr-1","1:140.9.1esr-1~deb11u1","1:140.9.1esr-1~deb12u1","1:140.9.1esr-1~deb13u1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.oe2403"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.oe2403sp1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.oe2403sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.oe2403sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-2.oe2203sp4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_8"}]}],"bundled":30},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_8"}]}],"bundled":30},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_8"}]}],"bundled":30},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_8"}]}],"bundled":29},{"source":"osv","ecosystem":"Rocky Linux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el9_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.10.1-1.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.10.1-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.12.0-bp160.1.1"}]}],"bundled":56}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2029461","tags":["Permissions Required"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-30/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-33/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-36/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-39/","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7321","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-36"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-30"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-33"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-39"},{"url":"https://github.com/advisories/GHSA-jjvw-q2ff-g9g3"},{"url":"https://access.redhat.com/errata/RHSA-2026:19153","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7320","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7321","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7322","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7323","tags":["report"]},{"url":"https://bugzilla.redhat.com/2463481","tags":["report"]},{"url":"https://bugzilla.redhat.com/2463483","tags":["report"]},{"url":"https://bugzilla.redhat.com/2463484","tags":["report"]},{"url":"https://bugzilla.redhat.com/2463485","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-19153.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-8091.html","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19157","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-19157.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19348","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6746","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6747","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6748","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6749","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6750","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6751","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6752","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6753","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6754","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6757","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6759","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6761","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6762","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6763","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6764","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6765","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6766","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6767","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6769","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6770","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6771","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6772","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6776","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6785","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6786","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460074","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460075","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460076","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460078","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460079","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460085","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460086","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460088","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460092","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460094","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460095","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460096","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460097","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460099","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460101","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460102","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460103","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460104","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460105","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460106","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460107","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460108","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460109","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460110","tags":["report"]},{"url":"https://bugzilla.redhat.com/2460112","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-19348.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19370","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-19370.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19588","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-19588.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20586","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-20586.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1781619768.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-7321","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2132","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7323","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2133","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2134","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2246","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2275","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8091","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2463481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2463483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2463484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2463485","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19153.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7320","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-36/#CVE-2026-7320","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-39/#CVE-2026-7320","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7321","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-36/#CVE-2026-7321","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-39/#CVE-2026-7321","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7322","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-36/#CVE-2026-7322","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-39/#CVE-2026-7322","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7323","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-36/#CVE-2026-7323","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-39/#CVE-2026-7323","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-8091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467699","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-8091","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-36/#CVE-2026-8091","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-39/#CVE-2026-8091","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-42/#CVE-2026-8091","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19157.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460094","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460112","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19348.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6746","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6746","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6746","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6746","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6747","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6747","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6747","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6747","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6748","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6748","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6748","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6748","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6749","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6749","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6749","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6750","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6750","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6750","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6751","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6751","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6751","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6752","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6752","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6752","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6753","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6753","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6753","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6753","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6754","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6754","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6754","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6754","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6757","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6757","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6757","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6757","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6759","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6759","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6759","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6759","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6761","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6761","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6761","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6761","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6762","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6762","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6762","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6762","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6763","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6763","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6763","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6763","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6764","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6764","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6764","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6764","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6765","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6765","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6765","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6765","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6766","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6766","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6766","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6766","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6767","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6767","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6767","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6767","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6769","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6769","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6769","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6769","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6770","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6770","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6770","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6770","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6771","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6771","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6771","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6771","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6772","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6772","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6772","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6772","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6776","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6776","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6776","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6776","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6785","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6785","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6785","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6786","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6786","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6786","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19370.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19588.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20586.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:21743","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_21743.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22324","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22324.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22408","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22408.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22409","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22409.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22410","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22410.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22708","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22708.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22712","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22712.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22847","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22847.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24345","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24345.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24717","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24717.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24718","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24718.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24719","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24719.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24721","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24721.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24844","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24844.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24846","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24846.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25014","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25014.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19153","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19348","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19370","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19588","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:20586","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261741-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1262230","tags":["report"]},{"url":"https://bugzilla.suse.com/1263110","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7323","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261829-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261830-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1264378","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8094","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621541-1/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1158957","tags":["report"]},{"url":"https://bugzilla.suse.com/1265212","tags":["report"]},{"url":"https://bugzilla.suse.com/1268071","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8975","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-7321","title":"Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component","description":"Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.","status":"published","published":"2026-04-28T13:49:12.432Z","modified":"2026-04-30T17:19:49.963Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:20:05.830416Z"}],"euvd":[{"id":"EUVD-2026-26058","description":"Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.","status":"published","published":"2026-04-28T13:49:12Z","modified":"2026-04-30T17:19:49Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:05:18.723006Z"}],"ghsa":[{"id":"GHSA-jjvw-q2ff-g9g3","title":"Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This...","description":"Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox ESR 140.10.1.","status":"published","published":"2026-04-28T15:30:52Z","modified":"2026-04-30T18:31:29Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:07:52.236911Z"}],"nvd":[{"id":"CVE-2026-7321","description":"Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.","status":"published","published":"2026-04-28T15:16:37.55Z","modified":"2026-10-26T20:10:00.16Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:12:16.252509Z"}],"osv":[{"id":"DEBIAN-CVE-2026-7321","description":"Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.","status":"published","published":"2026-04-28T15:16:37.55Z","modified":"2026-10-27T09:47:40.178860667Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:46:02.499355Z"},{"id":"OESA-2026-2132","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nInformation disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7320)\n\nSandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.(CVE-2026-7321)\n\nMemory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7322)\n\nMemory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7323)","status":"published","published":"2026-05-03T11:11:07Z","modified":"2026-08-18T01:19:56.505338133Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2133","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nInformation disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7320)\n\nSandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.(CVE-2026-7321)\n\nMemory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7322)\n\nMemory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7323)","status":"published","published":"2026-05-03T11:11:07Z","modified":"2026-08-18T01:19:50.612313256Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2134","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nInformation disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7320)\n\nSandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.(CVE-2026-7321)\n\nMemory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7322)\n\nMemory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7323)","status":"published","published":"2026-05-03T11:11:07Z","modified":"2026-08-18T01:19:56.495330159Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2246","title":"thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\r\n\r\nSecurity Fix(es):\n\nInformation disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7320)\n\nSandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.(CVE-2026-7321)\n\nMemory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7322)\n\nMemory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7323)","status":"published","published":"2026-05-09T11:11:13Z","modified":"2026-08-18T01:19:52.881843613Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2275","title":"firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo\r\n\r\nSecurity Fix(es):\n\nInformation disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7320)\n\nSandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.(CVE-2026-7321)\n\nMemory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7322)\n\nMemory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.(CVE-2026-7323)\n\nIncorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.(CVE-2026-8091)","status":"published","published":"2026-05-09T11:11:15Z","modified":"2026-08-18T01:19:57.457521987Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"RHSA-2026:19153","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-20T10:10:06Z","modified":"2026-07-29T10:18:10.725373449Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19157","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-20T10:10:08Z","modified":"2026-07-29T10:18:10.874672929Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19348","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-20T10:10:28Z","modified":"2026-07-29T10:05:32Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19370","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-20T10:10:40Z","modified":"2026-07-29T10:05:36Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19588","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-21T10:08:24Z","modified":"2026-07-29T10:05:39Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:20586","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-05-26T10:07:39Z","modified":"2026-07-29T10:05:49Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:21743","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-05-29T10:11:02Z","modified":"2026-07-29T10:05:59Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:22324","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-06-02T10:08:39Z","modified":"2026-07-29T10:18:13.20970739Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:22408","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-06-02T10:08:43Z","modified":"2026-07-29T10:06:11Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:22409","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-06-03T10:20:08Z","modified":"2026-07-29T10:18:13.463832121Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:22410","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-06-02T10:08:44Z","modified":"2026-07-29T10:18:13.206028356Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:22708","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-06-04T10:08:00Z","modified":"2026-07-29T10:06:14Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:22712","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-06-03T10:20:18Z","modified":"2026-07-29T10:06:16Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:22847","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-06-04T10:08:07Z","modified":"2026-07-29T10:06:18Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:24345","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-06-08T10:06:40Z","modified":"2026-07-29T10:06:32Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:24717","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-06-09T10:08:48Z","modified":"2026-07-29T10:15:57.555041404Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:24718","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-06-09T10:08:48Z","modified":"2026-07-29T10:18:13.468416795Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:24719","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-06-09T10:08:49Z","modified":"2026-07-29T10:18:13.807591902Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:24721","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-06-09T10:08:49Z","modified":"2026-07-29T10:06:41Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:24844","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-06-10T10:08:03Z","modified":"2026-07-29T10:06:43Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:24846","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-06-10T10:08:03Z","modified":"2026-07-29T10:18:13.744721125Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:25014","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-06-10T10:08:08Z","modified":"2026-07-29T10:06:45Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RLSA-2026:19153","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)\n\n* firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)\n\n* firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)\n\n* firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-29T16:03:24.060458Z","modified":"2026-05-29T16:30:36.246360047Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:19348","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n\n* firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n\n* firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n\n* firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n\n* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n\n* firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n\n* firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n\n* firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n\n* firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n\n* firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n\n* firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n\n* firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n\n* firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n\n* firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n\n* firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n\n* firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)\n\n* firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)\n\n* firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)\n\n* firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-28T15:43:06.024531Z","modified":"2026-05-28T16:00:29.256120597Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:19370","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)\n\n* firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)\n\n* firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)\n\n* firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-28T15:43:06.024531Z","modified":"2026-05-28T16:00:30.436452781Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:19588","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)\n\n* firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)\n\n* firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)\n\n* firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-23T06:00:52.322059Z","modified":"2026-05-23T06:30:04.573077736Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:20586","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)\n\n* firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)\n\n* firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)\n\n* firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-29T00:00:29.215827Z","modified":"2026-05-29T00:30:04.789789343Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"ALSA-2026:19153","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)\n  * firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)\n  * firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)\n  * firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-11-06T12:00:02.672851769Z","updated_at":"2026-11-06T12:12:56.168821Z"},{"id":"ALSA-2026:19157","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)\n  * firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)\n  * firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)\n  * firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-11-06T12:00:03.770308547Z","updated_at":"2026-11-06T12:12:56.168821Z"},{"id":"ALSA-2026:19348","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)\n  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)\n  * firefox: thunderbird: Spoofing issue in the DOM: Core \u0026 HTML component (CVE-2026-6762)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)\n  * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)\n  * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)\n  * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)\n  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)\n  * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)\n  * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)\n  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)\n  * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)\n  * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)\n  * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)\n  * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)\n  * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)\n  * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)\n  * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)\n  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-6746)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)\n  * firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)\n  * firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)\n  * firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-11-06T12:00:03.70909716Z","updated_at":"2026-11-06T12:12:56.168821Z"},{"id":"ALSA-2026:19370","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)\n  * firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)\n  * firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)\n  * firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-11-06T12:00:02.681099911Z","updated_at":"2026-11-06T12:12:56.168821Z"},{"id":"ALSA-2026:19588","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)\n  * firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)\n  * firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)\n  * firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-20T00:00:00Z","modified":"2026-11-06T10:58:09.5339527Z","updated_at":"2026-11-06T11:08:40.431174Z"},{"id":"ALSA-2026:20586","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)\n  * firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)\n  * firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)\n  * firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-26T00:00:00Z","modified":"2026-11-06T10:58:08.854792064Z","updated_at":"2026-11-06T11:08:40.431174Z"},{"id":"CLSA-2026-1781619768","title":"thunderbird: Fix of CVE-2026-7321","description":"- CVE-2026-7321: remove the custom memory allocator from the WebRTC nICEr/nrappkit\n  transport (r_strdup/RMALLOC/RFREE) that had incorrect size boundary conditions and\n  replace all uses with standard strdup/malloc/free to prevent a buffer overflow","status":"published","published":"2026-06-16T14:23:03Z","modified":"2026-10-26T09:30:19.893607869Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"openSUSE-SU-2026:10661-1","title":"firefox-esr-140.10.1-1.1 on GA media","description":"These are all security issues fixed in the firefox-esr-140.10.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-30T00:00:00Z","modified":"2026-05-01T08:17:34.264398Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:10687-1","title":"MozillaThunderbird-140.10.1-1.1 on GA media","description":"These are all security issues fixed in the MozillaThunderbird-140.10.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-05T00:00:00Z","modified":"2026-05-06T08:00:42.690063Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20667-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nUpdate to Firefox Extended Support Release 140.10.1 ESR.\n\n- MFSA 2026-36 (bsc#1263110)\n  * CVE-2026-7320: Information disclosure due to incorrect boundary conditions in the Audio/Video component.\n  * CVE-2026-7321: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component.\n  * CVE-2026-7322: Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR 140.10.1, Thunderbird ESR 140.10.1,\n    Firefox 150.0.1 and Thunderbird 150.0.1\n  * CVE-2026-7323: Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and\n    Thunderbird 150.0.1\n","status":"published","published":"2026-05-04T11:31:11Z","modified":"2026-05-07T18:24:22.704792Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:21168-1","title":"Security update for MozillaThunderbird","description":"This update for MozillaThunderbird fixes the following issues:\n\nChanges in MozillaThunderbird:\n\n- Mozilla Thunderbird 140.12.0 ESR\n  MFSA 2026-61 (bsc#1268071)\n  * CVE-2026-12289 (bmo#2023443)\n    Privilege escalation in the Graphics: WebRender component\n  * CVE-2026-12290 (bmo#2024852)\n    Memory safety bug fixed in Thunderbird ESR 140.12\n  * CVE-2026-12291 (bmo#2036929)\n    Use-after-free in the Networking: HTTP component\n  * CVE-2026-12292 (bmo#2038465)\n    Incorrect boundary conditions in the Web Audio component\n  * CVE-2026-12294 (bmo#2039873)\n    Sandbox escape in the DOM: Workers component\n  * CVE-2026-12295 (bmo#2040160)\n    Sandbox escape in the DOM: Navigation component\n  * CVE-2026-12298 (bmo#2041981)\n    Memory safety bug fixed in Thunderbird ESR 140.12\n  * CVE-2026-12296 (bmo#2040515)\n    Sandbox escape in the Security: Process Sandboxing component\n  * CVE-2026-12297 (bmo#2041610)\n    Sandbox escape due to incorrect boundary conditions in the\n    Networking component\n  * CVE-2026-12299 (bmo#2043139)\n    JIT miscompilation in the DOM: Core \u0026 HTML component\n  * CVE-2026-12329 (bmo#2044738)\n    Memory safety bug fixed in Thunderbird ESR 140.12\n  * CVE-2026-12302 (bmo#2034489)\n    Mitigation bypass in the DOM: Security component\n  * CVE-2026-12304 (bmo#2034944)\n    Same-origin policy bypass in the Networking: Cookies component\n  * CVE-2026-12305 (bmo#2037290)\n    Memory safety bug fixed in Thunderbird ESR 140.12\n  * CVE-2026-12306 (bmo#2037323)\n    Memory safety bug fixed in Thunderbird ESR 140.12\n  * CVE-2026-12307 (bmo#2038133)\n    Memory safety bug fixed in Thunderbird ESR 140.12\n  * CVE-2026-12308 (bmo#2038302)\n    Memory safety bug fixed in Thunderbird ESR 140.12\n  * CVE-2026-12309 (bmo#2038476)\n    Memory safety bug fixed in Thunderbird ESR 140.12\n  * CVE-2026-12310 (bmo#2039707)\n    Memory safety bug fixed in Thunderbird ESR 140.12\n  * CVE-2026-12311 (bmo#2040177)\n    Information disclosure, sandbox escape in the Security:\n    Process Sandboxing component\n  * CVE-2026-12312 (bmo#2040383)\n    Memory safety bug fixed in Thunderbird ESR 140.12\n  * CVE-2026-12313 (bmo#2040477)\n    Information disclosure, sandbox escape in the Security:\n    Process Sandboxing component\n  * CVE-2026-12314 (bmo#2041856)\n    Memory safety bug fixed in Thunderbird ESR 140.12\n  * CVE-2026-12315 (bmo#2042058)\n    Mitigation bypass in the DOM: Security component\n  * CVE-2026-12330 (bmo#2029326)\n    Incorrect boundary conditions in the Internationalization\n    component\n  * CVE-2026-12324 (bmo#2038444)\n    Incorrect boundary conditions in the Graphics: CanvasWebGL\n    component\n  * CVE-2026-12325 (bmo#2039443)\n    Denial-of-service in the Graphics: ImageLib component\n  * CVE-2026-12327 (bmo#2011842, bmo#2023902, bmo#2025512, bmo#2027312,\n    bmo#2029444, bmo#2036571, bmo#2036900, bmo#2036936, bmo#2037995,\n    bmo#2038551, bmo#2040717, bmo#2042724)\n    Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird\n    ESR 140.12, Firefox 152 and Thunderbird 152\n  * CVE-2026-12328 (bmo#2029402, bmo#2038477, bmo#2039726, bmo#2041373,\n    bmo#2042268, bmo#2042451, bmo#2042782, bmo#2042858, bmo#2042929,\n    bmo#2042965, bmo#2043213)\n    Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR\n    140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152\n\n- Mozilla Thunderbird 140.11.0 ESR\n  MFSA 2026-51 (bsc#1265212)\n  * CVE-2026-8946 (bmo#2029070)\n    Incorrect boundary conditions in the Audio/Video: Web Codecs\n    component\n  * CVE-2026-8388 (bmo#2036978)\n    Incorrect boundary conditions in the JavaScript Engine: JIT\n    component\n  * CVE-2026-8947 (bmo#2038439)\n    Use-after-free in the DOM: Bindings (WebIDL) component\n  * CVE-2026-8391 (bmo#2038575)\n    Other issue in the JavaScript Engine component\n  * CVE-2026-8401 (bmo#2038679)\n    Sandbox escape in the Profile Backup component\n  * CVE-2026-8949 (bmo#1355639)\n    Integer overflow in the Widget: Win32 component\n  * CVE-2026-8950 (bmo#1965430)\n    Same-origin policy bypass in the Networking: HTTP component\n  * CVE-2026-8953 (bmo#2029511)\n    Sandbox escape due to use-after-free in the Disability Access\n    APIs component\n  * CVE-2026-8954 (bmo#2030747)\n    Incorrect boundary conditions, integer overflow in the\n    Audio/Video component\n  * CVE-2026-8955 (bmo#2031064)\n    Privilege escalation in the DOM: Workers component\n  * CVE-2026-8956 (bmo#2032427)\n    Integer overflow in the Networking: JAR component\n  * CVE-2026-8957 (bmo#2033850)\n    Privilege escalation in the Enterprise Policies component\n  * CVE-2026-8958 (bmo#2034713)\n    Information disclosure, sandbox escape in the Security:\n    Process Sandboxing component\n  * CVE-2026-8959 (bmo#2034754)\n    Sandbox escape due to incorrect boundary conditions in the\n    Widget: Win32 component\n  * CVE-2026-8961 (bmo#1962625)\n    Spoofing issue in the Form Autofill component\n  * CVE-2026-8962 (bmo#2004804)\n    Mitigation bypass in the DOM: Security component\n  * CVE-2026-8968 (bmo#2030467)\n    Denial-of-service due to invalid pointer in the Audio/Video:\n    Web Codecs component\n  * CVE-2026-8970 (bmo#2032174)\n    Privilege escalation in the Security component\n  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677, bmo#2022390,\n    bmo#2023116, bmo#2023657, bmo#2024255, bmo#2024418, bmo#2024441,\n    bmo#2024447, bmo#2024966, bmo#2025412, bmo#2025467, bmo#2025940,\n    bmo#2025950, bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,\n    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332, bmo#2027333,\n    bmo#2028266, bmo#2028292, bmo#2028319, bmo#2028526, bmo#2028870,\n    bmo#2028876, bmo#2028882, bmo#2029062, bmo#2029309, bmo#2029414,\n    bmo#2029422, bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,\n    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028, bmo#2031457,\n    bmo#2032039, bmo#2033610, bmo#2033854, bmo#2034498, bmo#2034628,\n    bmo#2034978, bmo#2035966, bmo#2036668, bmo#2036905, bmo#2036930)\n    Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151\n  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429, bmo#2029910,\n    bmo#2035915, bmo#2038669, bmo#2038678)\n    Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151\n\n- Mozilla Thunderbird 140.10.2\n  MFSA 2026-44 (bsc#1264378)\n  * CVE-2026-8090 (bmo#2034352)\n    Use-after-free in the DOM: Networking component\n  * CVE-2026-8094 (bmo#2035939)\n    Other issue in the WebRTC component\n  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576, bmo#2022722,\n    bmo#2024439, bmo#2027883, bmo#2029463, bmo#2030323, bmo#2032042,\n    bmo#2032043, bmo#2033270, bmo#2033637, bmo#2034422, bmo#2034496,\n    bmo#2035879, bmo#2036516)\n    Memory safety bugs fixed in Thunderbird ESR 140.10.2 and\n    Thunderbird 150.0.2\n\n- Mozilla Thunderbird 140.10.1 ESR\n  MFSA 2026-39 (bsc#1263110)\n  * CVE-2026-7320 (bmo#2027433)\n    Information disclosure due to incorrect boundary conditions\n    in the Audio/Video component\n  * CVE-2026-7321 (bmo#2029461)\n    Sandbox escape due to incorrect boundary conditions in the\n    WebRTC: Networking component\n  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,\n    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,\n    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,\n    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,\n    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)\n    Memory safety bugs fixed in Thunderbird ESR 140.10.1 and\n    Thunderbird 150.0.1\n  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,\n    bmo#2033602)\n    Memory safety bugs fixed in Thunderbird ESR 140.10.1 and\n    Thunderbird 150.0.1\n","status":"published","published":"2026-06-29T11:13:35Z","modified":"2026-06-30T09:15:07.725612415Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:1741-1","title":"Security update for MozillaThunderbird","description":"This update for MozillaThunderbird fixes the following issues\n\nUpdated to Mozilla Thunderbird 140.10.1:\n\nMFSA 2026-34 (bsc#1262230):\n\n- CVE-2026-6746: Use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-6747: Use-after-free in the WebRTC component.\n- CVE-2026-6748: Uninitialized memory in the Audio/Video: Web Codecs component.\n- CVE-2026-6749: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component.\n- CVE-2026-6750: Privilege escalation in the Graphics: WebRender component.\n- CVE-2026-6751: Uninitialized memory in the Audio/Video: Web Codecs component.\n- CVE-2026-6752: Incorrect boundary conditions in the WebRTC component.\n- CVE-2026-6753: Incorrect boundary conditions in the WebRTC component.\n- CVE-2026-6754: Use-after-free in the JavaScript Engine component.\n- CVE-2026-6757: Invalid pointer in the JavaScript: WebAssembly component.\n- CVE-2026-6759: Use-after-free in the Widget: Cocoa component.\n- CVE-2026-6761: Privilege escalation in the Networking component.\n- CVE-2026-6762: Spoofing issue in the DOM: Core \u0026 HTML component.\n- CVE-2026-6763: Mitigation bypass in the File Handling component.\n- CVE-2026-6764: Incorrect boundary conditions in the DOM: Device Interfaces component.\n- CVE-2026-6765: Information disclosure in the Form Autofill component.\n- CVE-2026-6766: Incorrect boundary conditions in the Libraries component in NSS.\n- CVE-2026-6767: Other issue in the Libraries component in NSS.\n- CVE-2026-6769: Privilege escalation in the Debugger component.\n- CVE-2026-6770: Other issue in the Storage: IndexedDB component.\n- CVE-2026-6771: Mitigation bypass in the DOM: Security component.\n- CVE-2026-6772: Incorrect boundary conditions in the Libraries component in NSS.\n- CVE-2026-6776: Incorrect boundary conditions in the WebRTC: Networking component.\n- CVE-2026-6785: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150\n  and Thunderbird 150.\n- CVE-2026-6786: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird\n  150.\n\n\nMFSA 2026-39 (bsc#1263110):\n\n- CVE-2026-7320: Information disclosure due to incorrect boundary conditions in the Audio/Video component.\n- CVE-2026-7321: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component.\n- CVE-2026-7322: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1.\n- CVE-2026-7323: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1.\n\nOther updates and bugfixes:\n\n- Fixed: Newly translated strings were not available in Thunderbird.\n\n","status":"published","published":"2026-05-07T07:01:06Z","modified":"2026-05-08T08:15:28.567124Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:1829-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues\n\nUpdated to Firefox Extended Support Release 140.10.1 ESR (bsc#1263110,MFSA 2026-36):\n\n- CVE-2026-7320: Information disclosure due to incorrect boundary conditions in the Audio/Video component.\n- CVE-2026-7321: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component.\n- CVE-2026-7322: Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1.\n- CVE-2026-7323: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1.\n","status":"published","published":"2026-05-12T12:00:20Z","modified":"2026-05-14T08:16:04.199181Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:1830-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues\n    \nUpdated to Firefox Extended Support Release 140.10.2 ESR (bsc#1264378,MFSA 2026-41):\n\n- CVE-2026-8090: Use-after-free in the DOM: Networking component.\n- CVE-2026-8092: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2.\n- CVE-2026-8094: Other issue in the WebRTC component.\n\nUpdated to Firefox Extended Support Release 140.10.1 ESR (bsc#1263110,MFSA 2026-36):\n\n- CVE-2026-7320: Information disclosure due to incorrect boundary conditions in the Audio/Video component.\n- CVE-2026-7321: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component.\n- CVE-2026-7322: Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1.\n- CVE-2026-7323: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1.\n- CVE-2026-8091: Incorrect boundary conditions in the Audio/Video: Playback component.\n  ","status":"published","published":"2026-05-12T12:00:47Z","modified":"2026-05-14T08:15:41.55001Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:21541-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nUpdate to Firefox Extended Support Release 140.10.1 ESR.\n\n- MFSA 2026-36 (bsc#1263110)\n  * CVE-2026-7320: Information disclosure due to incorrect boundary conditions in the Audio/Video component.\n  * CVE-2026-7321: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component.\n  * CVE-2026-7322: Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR 140.10.1, Thunderbird ESR 140.10.1,\n    Firefox 150.0.1 and Thunderbird 150.0.1\n  * CVE-2026-7323: Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and\n    Thunderbird 150.0.1\n","status":"published","published":"2026-05-04T11:28:17Z","modified":"2026-05-12T18:26:44.659967Z","updated_at":"2026-11-02T15:54:02.312556Z"}]}}