{"id":"CVE-2026-92052","aliases":["CLSA-2026-1791305177","DEBIAN-CVE-2026-92052","EUVD-2026-78515","GHSA-mfh6-5cjm-6jhf","MGASA-2026-0441","MGASA-2026-0449","SUSE-SU-2026:23918-1","SUSE-SU-2026:4247-1","SUSE-SU-2026:4264-1","SUSE-SU-2026:4627-1","UBUNTU-CVE-2026-92052","openSUSE-SU-2026:11796-1","openSUSE-SU-2026:11826-1","openSUSE-SU-2026:12098-1","openSUSE-SU-2026:21951-1"],"status":"published","title":"Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component","description":"Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-08","score":0.00239,"percentile":0.15091,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-457"],"published":"2026-09-15T12:34:13Z","modified":"2026-10-26T09:43:50Z","fixes":[{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:153.3.0esr-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.1-1.el9_2.alma.1.tuxcare.els1"}]}],"bundled":66},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:153.3.0esr-1"}]}],"versions":["1:128.13.0esr-1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.10.0esr-1","1:140.10.0esr-1~deb11u1","1:140.10.0esr-1~deb12u1","1:140.10.0esr-1~deb13u1","1:140.10.1esr-1","1:140.10.1esr-1~deb11u1","1:140.10.1esr-1~deb12u1","1:140.10.1esr-1~deb13u1","1:140.10.2esr-1","1:140.10.2esr-1~deb11u1","1:140.10.2esr-1~deb12u1","1:140.10.2esr-1~deb13u1","1:140.11.0esr-1","1:140.11.0esr-1~deb11u1","1:140.11.0esr-1~deb12u1","1:140.11.0esr-1~deb13u1","1:140.12.0esr-1","1:140.12.0esr-1~deb11u1","1:140.12.0esr-1~deb12u1","1:140.12.0esr-1~deb13u1","1:140.13.0esr-1","1:140.13.0esr-2","1:140.13.0esr-2~deb11u1","1:140.13.0esr-2~deb12u1","1:140.13.0esr-2~deb13u1","1:140.14.0esr-1","1:140.14.0esr-1~deb11u1","1:140.14.0esr-1~deb12u1","1:140.14.0esr-1~deb13u1","1:140.15.0esr-1~deb12u1","1:140.15.0esr-1~deb13u1","1:140.16.0esr-1~deb12u1","1:140.16.0esr-1~deb13u1","1:140.17.0esr-1~deb12u1","1:140.17.0esr-1~deb13u1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1","1:140.5.0esr-1~deb13u1","1:140.6.0esr-1","1:140.6.0esr-1~deb11u1","1:140.6.0esr-1~deb12u1","1:140.6.0esr-1~deb13u1","1:140.7.0esr-1","1:140.7.0esr-1~deb11u1","1:140.7.0esr-1~deb12u1","1:140.7.0esr-1~deb13u1","1:140.7.1esr-1","1:140.7.1esr-1~deb11u1","1:140.7.1esr-1~deb12u1","1:140.7.1esr-1~deb13u1","1:140.8.0esr-1","1:140.8.0esr-1~deb11u1","1:140.8.0esr-1~deb12u1","1:140.8.0esr-1~deb13u1","1:140.9.0esr-1","1:140.9.0esr-1~deb11u1","1:140.9.0esr-1~deb12u1","1:140.9.0esr-1~deb13u1","1:140.9.1esr-1","1:140.9.1esr-1~deb11u1","1:140.9.1esr-1~deb12u1","1:140.9.1esr-1~deb13u1","1:143.0.1-1","1:144.0.1-1","1:148.0.1-1","1:149.0.2-1","1:152.0-1","1:153.0.1esr-1","1:153.0.3esr-1","1:153.1.0esr-1","1:153.2.0esr-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-1.mga10"}]}],"bundled":59},{"source":"osv","ecosystem":"Mageia:10","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.129.0-1.mga10"}]}],"bundled":59},{"source":"osv","ecosystem":"Mageia:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-1.mga10"}]}],"bundled":59},{"source":"osv","ecosystem":"Mageia:9","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.16.0-1.mga9"}]}],"bundled":59},{"source":"osv","ecosystem":"Mageia:9","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.129.0-1.mga9"}]}],"bundled":59},{"source":"osv","ecosystem":"Mageia:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.16.0-1.mga9"}]}],"bundled":59},{"source":"osv","ecosystem":"Mageia:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-1.mga10"}]}],"bundled":62},{"source":"osv","ecosystem":"Mageia:10","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-1.mga10"}]}],"bundled":62},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.16.0-1.mga9"}]}],"bundled":62},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.16.0-1.mga9"}]}],"bundled":62},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-160000.1.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-160000.1.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-118.8.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-118.8.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-150400.157.8.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-150400.157.8.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-150400.157.8.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-150400.157.8.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-150400.157.8.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-150400.157.8.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-150400.157.8.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-150400.157.8.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-150400.157.8.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-150400.157.8.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-150400.157.8.1"}]}],"bundled":63},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.4.0-150400.13.6.1"}]}],"bundled":129},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.4.0-150400.13.6.1"}]}],"bundled":129},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.3.1-0ubuntu3","52.3.1-7fakesync1","52.8.1-0ubuntu0.18.04.1","52.9.1-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs38","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["38.8.0~repack1-0ubuntu1","38.8.0~repack1-0ubuntu3","38.8.0~repack1-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs68","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["68.5.0-1~fakesync","68.5.0-2~fakesync","68.6.0-1","68.6.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.9.1-1build1","52.9.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.11.0-0ubuntu0.22.04.1","102.12.0-0ubuntu0.22.04.1","102.13.0-0ubuntu0.22.04.1","102.15.1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs78","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["78.13.0-1","78.15.0-2","78.15.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["91.5.1-0ubuntu1","91.6.0-1","91.6.0-2","91.7.0-2","91.10.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1","1:102.8.0+build2-0ubuntu0.22.04.1","1:102.9.0+build1-0ubuntu0.22.04.1","1:102.10.0+build2-0ubuntu0.22.04.1","1:102.11.0+build1-0ubuntu0.22.04.1","1:102.13.0+build1-0ubuntu0.22.04.1","1:102.15.0+build1-0ubuntu0.22.04.1","1:102.15.1+build1-0ubuntu0.22.04.1","1:115.3.1+build1-0ubuntu0.22.04.2","1:115.4.1+build1-0ubuntu0.22.04.1","1:115.5.0+build1-0ubuntu0.22.04.1","1:115.6.0+build2-0ubuntu0.22.04.1","1:115.8.1+build1-0ubuntu0.22.04.1","1:115.9.0+build1-0ubuntu0.22.04.1","1:115.10.1+build1-0ubuntu0.22.04.1","1:115.11.0+build2-0ubuntu0.22.04.1","1:115.12.0+build3-0ubuntu0.22.04.1","1:115.13.0+build5-0ubuntu0.22.04.1","1:115.15.0+build1-0ubuntu0.22.04.1","1:115.16.0+build2-0ubuntu0.22.04.1","1:115.18.0+build1-0ubuntu0.22.04.1","1:128.12.0+build1-0ubuntu0.22.04.1","1:140.7.1+build1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.15.1-1","102.15.1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs115","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["115.3.0-0ubuntu1","115.4.0-2","115.5.0-1","115.6.0-1","115.7.0-4","115.8.0-1","115.9.0-1","115.9.0-1build1","115.10.0-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-1.1"}]}],"bundled":63},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"156.0-1.1"}]}],"bundled":73},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.4.0-1.1"}]}],"bundled":138},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.3.0-160000.1.1"}]}],"bundled":63}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2061499","tags":["Permissions Required"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-90/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-93/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-94/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-96/","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92052","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-90"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-93"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-94"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-96"},{"url":"https://github.com/advisories/GHSA-mfh6-5cjm-6jhf"},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1791305177.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84128","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92005","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92008","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92009","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92015","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92017","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92018","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92019","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92020","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92024","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92025","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92026","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92027","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92028","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92029","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92030","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92031","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92035","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92038","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92044","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92045","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92046","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92054","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92055","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92056","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92057","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92058","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92060","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92062","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92065","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92067","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92068","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92069","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92070","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92071","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92073","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92074","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92075","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92076","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92077","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92078","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92079","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92238","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92239","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92240","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-92052","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0441.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36317","tags":["report"]},{"url":"https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_129.html","tags":["web"]},{"url":"https://www.firefox.com/en-US/firefox/140.16.0/releasenotes/","tags":["web"]},{"url":"https://www.firefox.com/en-US/firefox/153.3.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-92/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-93/","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0449.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36318","tags":["report"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/140.16.0esr/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/153.3.0esr/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-95/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-96/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623918-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1280371","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92079","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264247-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264264-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264627-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1282929","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-103500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-96869","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-92052","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92052","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92052","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84642","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-92052","title":"Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component","description":"Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.","status":"published","published":"2026-09-15T12:34:13.451Z","modified":"2026-09-16T14:24:40.126Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-457"],"updated_at":"2026-11-02T13:48:24.536396Z"}],"euvd":[{"id":"EUVD-2026-78515","description":"Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.","status":"published","published":"2026-09-15T12:34:13Z","modified":"2026-09-16T14:24:40Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:28:16.201278Z"}],"ghsa":[{"id":"GHSA-mfh6-5cjm-6jhf","title":"Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This...","description":"Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.","status":"published","published":"2026-09-15T15:32:09Z","modified":"2026-09-16T15:32:03Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-457"],"updated_at":"2026-11-02T15:12:00.173219Z"}],"nvd":[{"id":"CVE-2026-92052","description":"Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.","status":"published","published":"2026-09-15T13:16:56.94Z","modified":"2026-10-05T18:42:53.72Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-457"],"updated_at":"2026-11-02T14:12:47.668237Z"}],"osv":[{"id":"DEBIAN-CVE-2026-92052","description":"Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.","status":"published","published":"2026-09-15T13:16:56.94Z","modified":"2026-10-06T16:02:21.523278708Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:06.410207Z"},{"id":"UBUNTU-CVE-2026-92052","description":"Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.","status":"published","published":"2026-09-15T13:16:00Z","modified":"2026-09-24T02:03:02.478854769Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:57:40.980117Z"},{"id":"CLSA-2026-1791305177","title":"thunderbird: Fix of 65 CVEs","description":"- update to 153.3.1 ESR (MFSA 2026-96)\n- 153.3.1 is a respin of 153.3 and carries no security content of its own;\n  every fix listed below comes from 153.3\n- regenerate langpacks from the 153.3.1esr release xpi set (66 languages,\n  the same set as 153.2.0esr)\n- CVE-2026-92238: Ambiguous parsing of mail headers\n- CVE-2026-92239: Buffer overrun in IMAP\n- CVE-2026-92240: Out-of-bounds read in IMAP response parser\n- CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component\n- CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92007: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92008: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92009: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92010: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92011: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92012: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92013: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n- CVE-2026-92015: Privilege escalation in the WebExtensions component\n- CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component\n- CVE-2026-92016: Use-after-free in the Disability Access APIs component\n- CVE-2026-92017: Privilege escalation in the DOM: Service Workers component\n- CVE-2026-92018: Sandbox escape in the DOM: Core \u0026 HTML component\n- CVE-2026-92019: Mitigation bypass in the Remote Settings Client component\n- CVE-2026-92020: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component\n- CVE-2026-92022: Use-after-free in the DOM: HTML Parser component\n- CVE-2026-92023: Use-after-free in the XML component\n- CVE-2026-92024: Use-after-free in the SVG component\n- CVE-2026-92025: Use-after-free in the DOM: Navigation component\n- CVE-2026-92026: Use-after-free in the Networking component\n- CVE-2026-92027: Use-after-free in the DOM: Streams component\n- CVE-2026-92028: Use-after-free in the DOM: Core \u0026 HTML component\n- CVE-2026-92029: Use-after-free in the SVG component\n- CVE-2026-92030: Mitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component\n- CVE-2026-92031: Information disclosure in the Graphics: ImageLib component\n- CVE-2026-92032: Sandbox escape due to invalid pointer in the Graphics component\n- CVE-2026-92038: Mitigation bypass in the Remote Settings Client component\n- CVE-2026-92039: Mitigation bypass in the DOM: Notifications component\n- CVE-2026-92041: Mitigation bypass in the DOM: Networking component\n- CVE-2026-92042: Race condition in the DOM: Content Processes component\n- CVE-2026-92043: Privilege escalation due to incorrect boundary conditions in the Audio/Video component\n- CVE-2026-92044: Information disclosure in the Networking: HTTP component\n- CVE-2026-92045: Sandbox escape due to incorrect boundary conditions in the WebRTC component\n- CVE-2026-92046: Use-after-free in the Graphics component\n- CVE-2026-92047: Privilege escalation in the Crash Reporting component\n- CVE-2026-92048: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component\n- CVE-2026-92049: Use-after-free in the Widget: Win32 component\n- CVE-2026-92052: Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component\n- CVE-2026-92053: Privilege escalation in the Graphics: CanvasWebGL component\n- CVE-2026-92054: Privilege escalation in the Memory component\n- CVE-2026-92055: Privilege escalation in the DevTools component\n- CVE-2026-92056: Use-after-free in the Graphics: Text component\n- CVE-2026-92057: Mitigation bypass in the Enterprise Policies component\n- CVE-2026-92058: Use-after-free in the Graphics component\n- CVE-2026-92059: Incorrect boundary conditions in the DOM: Editor component\n- CVE-2026-92060: Use-after-free in the Internationalization component\n- CVE-2026-92062: Privilege escalation in the Session Restore component\n- CVE-2026-92064: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component\n- CVE-2026-92065: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component\n- CVE-2026-92067: Use-after-free in the Widget: Gtk component\n- CVE-2026-92068: Site isolation issue in the Reader Mode component\n- CVE-2026-92069: Spoofing issue in the DOM: Navigation component\n- CVE-2026-92070: Information disclosure in the Networking component\n- CVE-2026-92071: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component\n- CVE-2026-92072: Incorrect boundary conditions in the Safe Browsing component\n- CVE-2026-92073: Privilege escalation in the Enterprise Policies component\n- CVE-2026-92074: Mitigation bypass in the Popup Blocker component\n- CVE-2026-92075: Mitigation bypass in the Networking component\n- CVE-2026-92076: Incorrect boundary conditions in the Networking component\n- CVE-2026-92077: Denial-of-service in the SVG component\n- CVE-2026-92078: Denial-of-service in the Security component\n- CVE-2026-92079: Mitigation bypass in the Widget: Win32 component","status":"published","published":"2026-10-18T14:46:04Z","modified":"2026-10-26T09:43:50.462035097Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"MGASA-2026-0441","title":"Updated nss \u0026 firefox packages fix security vulnerabilities","description":"Use-after-free in the Audio/Video: Web Codecs component.\n(CVE-2026-92005)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92006)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92007)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92008)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92009)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92010)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92011)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92012)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92013)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics component. (CVE-2026-92014)\nPrivilege escalation in the WebExtensions component. (CVE-2026-92015)\nUse-after-free in the Disability Access APIs component. (CVE-2026-92016)\nPrivilege escalation in the DOM: Service Workers component.\n(CVE-2026-92017)\nSandbox escape in the DOM: Core \u0026 HTML component. (CVE-2026-92018)\nMitigation bypass in the Remote Settings Client component.\n(CVE-2026-92019)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: WebRender component. (CVE-2026-92020)\nUse-after-free in the JavaScript Engine: JIT component. (CVE-2026-92021)\nUse-after-free in the DOM: HTML Parser component. (CVE-2026-92022)\nUse-after-free in the XML component. (CVE-2026-92023)\nUse-after-free in the SVG component. (CVE-2026-92024)\nUse-after-free in the DOM: Navigation component. (CVE-2026-92025)\nUse-after-free in the Networking component. (CVE-2026-92026)\nUse-after-free in the DOM: Streams component. (CVE-2026-92027)\nUse-after-free in the DOM: Core \u0026 HTML component. (CVE-2026-92028)\nUse-after-free in the SVG component. (CVE-2026-92029)\nMitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component.\n(CVE-2026-92030)\nInformation disclosure in the Graphics: ImageLib component.\n(CVE-2026-92031)\nSandbox escape due to invalid pointer in the Graphics component.\n(CVE-2026-92032)\nMitigation bypass in the Remote Settings Client component.\n(CVE-2026-92038)\nMitigation bypass in the DOM: Notifications component. (CVE-2026-92039)\nMitigation bypass in the DOM: Networking component. (CVE-2026-92041)\nRace condition in the DOM: Content Processes component. (CVE-2026-92042)\nPrivilege escalation due to incorrect boundary conditions in the\nAudio/Video component. (CVE-2026-92043)\nInformation disclosure in the Networking: HTTP component.\n(CVE-2026-92044)\nSandbox escape due to incorrect boundary conditions in the WebRTC\ncomponent. (CVE-2026-92045)\nUse-after-free in the Graphics component. (CVE-2026-92046)\nPrivilege escalation in the Crash Reporting component. (CVE-2026-92047)\nPrivilege escalation due to uninitialized memory in the Graphics:\nCanvasWebGL component. (CVE-2026-92052)\nPrivilege escalation in the Graphics: CanvasWebGL component.\n(CVE-2026-92053)\nPrivilege escalation in the Memory component. (CVE-2026-92054)\nPrivilege escalation in the DevTools component. (CVE-2026-92055)\nUse-after-free in the Graphics: Text component. (CVE-2026-92056)\nMitigation bypass in the Enterprise Policies component. (CVE-2026-92057)\nUse-after-free in the Graphics component. (CVE-2026-92058)\nIncorrect boundary conditions in the DOM: Editor component.\n(CVE-2026-92059)\nUse-after-free in the Internationalization component. (CVE-2026-92060)\nPrivilege escalation in the Session Restore component. (CVE-2026-92062)\nUse-after-free in the Widget: Gtk component. (CVE-2026-92067)\nSite isolation issue in the Reader Mode component. (CVE-2026-92068)\nSpoofing issue in the DOM: Navigation component. (CVE-2026-92069)\nInformation disclosure in the Networking component. (CVE-2026-92070)\nIncorrect boundary conditions in the Safe Browsing component.\n(CVE-2026-92072)\nPrivilege escalation in the Enterprise Policies component.\n(CVE-2026-92073)\nMitigation bypass in the Popup Blocker component. (CVE-2026-92074)\nMitigation bypass in the Networking component. (CVE-2026-92075)\nIncorrect boundary conditions in the Networking component.\n(CVE-2026-92076)\nDenial-of-service in the SVG component. (CVE-2026-92077)\nDenial-of-service in the Security component. (CVE-2026-92078)\n","status":"published","published":"2026-09-23T16:56:55Z","modified":"2026-09-23T17:00:04.97546964Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"MGASA-2026-0449","title":"Updated thunderbird \u0026 thunderbird-l10n packages fix security vulnerabilities","description":"Ambiguous parsing of mail headers. (CVE-2026-92238)\nBuffer overrun in IMAP. (CVE-2026-92239)\nOut-of-bounds read in IMAP response parser. (CVE-2026-92240)\nUse-after-free in the Audio/Video: Web Codecs component.\n(CVE-2026-92005)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92006)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92007)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92008)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92009)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92010)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92011)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92012)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: CanvasWebGL component. (CVE-2026-92013)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics component. (CVE-2026-92014)\nPrivilege escalation in the WebExtensions component. (CVE-2026-92015)\nUse-after-free in the Disability Access APIs component. (CVE-2026-92016)\nPrivilege escalation in the DOM: Service Workers component.\n(CVE-2026-92017)\nSandbox escape in the DOM: Core \u0026 HTML component. (CVE-2026-92018)\nMitigation bypass in the Remote Settings Client component.\n(CVE-2026-92019)\nPrivilege escalation due to incorrect boundary conditions in the\nGraphics: WebRender component. (CVE-2026-92020)\nUse-after-free in the JavaScript Engine: JIT component. (CVE-2026-92021)\nUse-after-free in the DOM: HTML Parser component. (CVE-2026-92022)\nUse-after-free in the XML component. (CVE-2026-92023)\nUse-after-free in the SVG component. (CVE-2026-92024)\nUse-after-free in the DOM: Navigation component. (CVE-2026-92025)\nUse-after-free in the Networking component. (CVE-2026-92026)\nUse-after-free in the DOM: Streams component. (CVE-2026-92027)\nUse-after-free in the DOM: Core \u0026 HTML component. (CVE-2026-92028)\nUse-after-free in the SVG component. (CVE-2026-92029)\nMitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component.\n(CVE-2026-92030)\nInformation disclosure in the Graphics: ImageLib component.\n(CVE-2026-92031)\nSandbox escape due to invalid pointer in the Graphics component.\n(CVE-2026-92032)\nMitigation bypass in the Remote Settings Client component.\n(CVE-2026-92038)\nMitigation bypass in the DOM: Notifications component. (CVE-2026-92039)\nMitigation bypass in the DOM: Networking component. (CVE-2026-92041)\nRace condition in the DOM: Content Processes component. (CVE-2026-92042)\nPrivilege escalation due to incorrect boundary conditions in the\nAudio/Video component. (CVE-2026-92043)\nInformation disclosure in the Networking: HTTP component.\n(CVE-2026-92044)\nSandbox escape due to incorrect boundary conditions in the WebRTC\ncomponent. (CVE-2026-92045)\nUse-after-free in the Graphics component. (CVE-2026-92046)\nPrivilege escalation in the Crash Reporting component. (CVE-2026-92047)\nPrivilege escalation due to uninitialized memory in the Graphics:\nCanvasWebGL component. (CVE-2026-92052)\nPrivilege escalation in the Graphics: CanvasWebGL component.\n(CVE-2026-92053)\nPrivilege escalation in the Memory component. (CVE-2026-92054)\nPrivilege escalation in the DevTools component. (CVE-2026-92055)\nUse-after-free in the Graphics: Text component. (CVE-2026-92056)\nMitigation bypass in the Enterprise Policies component. (CVE-2026-92057)\nUse-after-free in the Graphics component. (CVE-2026-92058)\nIncorrect boundary conditions in the DOM: Editor component.\n(CVE-2026-92059)\nUse-after-free in the Internationalization component. (CVE-2026-92060)\nPrivilege escalation in the Session Restore component. (CVE-2026-92062)\nUse-after-free in the Widget: Gtk component. (CVE-2026-92067)\nSite isolation issue in the Reader Mode component. (CVE-2026-92068)\nSpoofing issue in the DOM: Navigation component. (CVE-2026-92069)\nInformation disclosure in the Networking component. (CVE-2026-92070)\nIncorrect boundary conditions in the Safe Browsing component.\n(CVE-2026-92072)\nPrivilege escalation in the Enterprise Policies component.\n(CVE-2026-92073)\nMitigation bypass in the Popup Blocker component. (CVE-2026-92074)\nMitigation bypass in the Networking component. (CVE-2026-92075)\nIncorrect boundary conditions in the Networking component.\n(CVE-2026-92076)\nDenial-of-service in the SVG component. (CVE-2026-92077)\nDenial-of-service in the Security component. (CVE-2026-92078)\n","status":"published","published":"2026-09-24T16:06:15Z","modified":"2026-09-24T16:27:30.713993764Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11796-1","title":"firefox-esr-153.3.0-1.1 on GA media","description":"These are all security issues fixed in the firefox-esr-153.3.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-16T00:00:00Z","modified":"2026-09-17T18:23:13.646114298Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11826-1","title":"MozillaFirefox-156.0-1.1 on GA media","description":"These are all security issues fixed in the MozillaFirefox-156.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-21T00:00:00Z","modified":"2026-09-22T18:23:08.566631384Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:12098-1","title":"MozillaThunderbird-153.4.0-1.1 on GA media","description":"These are all security issues fixed in the MozillaThunderbird-153.4.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-10T00:00:00Z","modified":"2026-10-11T12:45:03.85762477Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:21951-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nUpdate to Firefox Extended Support Release 153.3.0 ESR (MFSA 2026-93, bsc#1280371):\n\n- CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component.\n- CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92007: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92008: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92009: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92010: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92011: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92012: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92013: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92015: Privilege escalation in the WebExtensions component.\n- CVE-2026-92016: Use-after-free in the Disability Access APIs component.\n- CVE-2026-92017: Privilege escalation in the DOM: Service Workers component.\n- CVE-2026-92018: Sandbox escape in the DOM: Core \u0026 HTML component.\n- CVE-2026-92019: Mitigation bypass in the Remote Settings Client component.\n- CVE-2026-92020: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component.\n- CVE-2026-92022: Use-after-free in the DOM: HTML Parser component.\n- CVE-2026-92023: Use-after-free in the XML component.\n- CVE-2026-92024: Use-after-free in the SVG component.\n- CVE-2026-92025: Use-after-free in the DOM: Navigation component.\n- CVE-2026-92026: Use-after-free in the Networking component.\n- CVE-2026-92027: Use-after-free in the DOM: Streams component.\n- CVE-2026-92028: Use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-92029: Use-after-free in the SVG component.\n- CVE-2026-92030: Mitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component.\n- CVE-2026-92031: Information disclosure in the Graphics: ImageLib component.\n- CVE-2026-92032: Sandbox escape due to invalid pointer in the Graphics component.\n- CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component.\n- CVE-2026-92038: Mitigation bypass in the Remote Settings Client component.\n- CVE-2026-92039: Mitigation bypass in the DOM: Notifications component.\n- CVE-2026-92041: Mitigation bypass in the DOM: Networking component.\n- CVE-2026-92042: Race condition in the DOM: Content Processes component.\n- CVE-2026-92043: Privilege escalation due to incorrect boundary conditions in the Audio/Video component.\n- CVE-2026-92044: Information disclosure in the Networking: HTTP component.\n- CVE-2026-92045: Sandbox escape due to incorrect boundary conditions in the WebRTC component.\n- CVE-2026-92046: Use-after-free in the Graphics component.\n- CVE-2026-92047: Privilege escalation in the Crash Reporting component.\n- CVE-2026-92048: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92049: Use-after-free in the Widget: Win32 component.\n- CVE-2026-92052: Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component.\n- CVE-2026-92053: Privilege escalation in the Graphics: CanvasWebGL component.\n- CVE-2026-92054: Privilege escalation in the Memory component.\n- CVE-2026-92055: Privilege escalation in the DevTools component.\n- CVE-2026-92056: Use-after-free in the Graphics: Text component.\n- CVE-2026-92057: Mitigation bypass in the Enterprise Policies component.\n- CVE-2026-92058: Use-after-free in the Graphics component.\n- CVE-2026-92059: Incorrect boundary conditions in the DOM: Editor component.\n- CVE-2026-92060: Use-after-free in the Internationalization component.\n- CVE-2026-92062: Privilege escalation in the Session Restore component.\n- CVE-2026-92064: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92065: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92067: Use-after-free in the Widget: Gtk component.\n- CVE-2026-92068: Site isolation issue in the Reader Mode component.\n- CVE-2026-92069: Spoofing issue in the DOM: Navigation component.\n- CVE-2026-92070: Information disclosure in the Networking component.\n- CVE-2026-92071: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92072: Incorrect boundary conditions in the Safe Browsing component.\n- CVE-2026-92073: Privilege escalation in the Enterprise Policies component.\n- CVE-2026-92074: Mitigation bypass in the Popup Blocker component.\n- CVE-2026-92075: Mitigation bypass in the Networking component.\n- CVE-2026-92076: Incorrect boundary conditions in the Networking component.\n- CVE-2026-92077: Denial-of-service in the SVG component.\n- CVE-2026-92078: Denial-of-service in the Security component.\n- CVE-2026-92079: Mitigation bypass in the Widget: Win32 component.\n","status":"published","published":"2026-09-24T13:20:47Z","modified":"2026-09-25T18:23:15.038373098Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:23918-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nUpdate to Firefox Extended Support Release 153.3.0 ESR (MFSA 2026-93, bsc#1280371):\n\n- CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component.\n- CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92007: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92008: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92009: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92010: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92011: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92012: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92013: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92015: Privilege escalation in the WebExtensions component.\n- CVE-2026-92016: Use-after-free in the Disability Access APIs component.\n- CVE-2026-92017: Privilege escalation in the DOM: Service Workers component.\n- CVE-2026-92018: Sandbox escape in the DOM: Core \u0026 HTML component.\n- CVE-2026-92019: Mitigation bypass in the Remote Settings Client component.\n- CVE-2026-92020: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component.\n- CVE-2026-92022: Use-after-free in the DOM: HTML Parser component.\n- CVE-2026-92023: Use-after-free in the XML component.\n- CVE-2026-92024: Use-after-free in the SVG component.\n- CVE-2026-92025: Use-after-free in the DOM: Navigation component.\n- CVE-2026-92026: Use-after-free in the Networking component.\n- CVE-2026-92027: Use-after-free in the DOM: Streams component.\n- CVE-2026-92028: Use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-92029: Use-after-free in the SVG component.\n- CVE-2026-92030: Mitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component.\n- CVE-2026-92031: Information disclosure in the Graphics: ImageLib component.\n- CVE-2026-92032: Sandbox escape due to invalid pointer in the Graphics component.\n- CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component.\n- CVE-2026-92038: Mitigation bypass in the Remote Settings Client component.\n- CVE-2026-92039: Mitigation bypass in the DOM: Notifications component.\n- CVE-2026-92041: Mitigation bypass in the DOM: Networking component.\n- CVE-2026-92042: Race condition in the DOM: Content Processes component.\n- CVE-2026-92043: Privilege escalation due to incorrect boundary conditions in the Audio/Video component.\n- CVE-2026-92044: Information disclosure in the Networking: HTTP component.\n- CVE-2026-92045: Sandbox escape due to incorrect boundary conditions in the WebRTC component.\n- CVE-2026-92046: Use-after-free in the Graphics component.\n- CVE-2026-92047: Privilege escalation in the Crash Reporting component.\n- CVE-2026-92048: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92049: Use-after-free in the Widget: Win32 component.\n- CVE-2026-92052: Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component.\n- CVE-2026-92053: Privilege escalation in the Graphics: CanvasWebGL component.\n- CVE-2026-92054: Privilege escalation in the Memory component.\n- CVE-2026-92055: Privilege escalation in the DevTools component.\n- CVE-2026-92056: Use-after-free in the Graphics: Text component.\n- CVE-2026-92057: Mitigation bypass in the Enterprise Policies component.\n- CVE-2026-92058: Use-after-free in the Graphics component.\n- CVE-2026-92059: Incorrect boundary conditions in the DOM: Editor component.\n- CVE-2026-92060: Use-after-free in the Internationalization component.\n- CVE-2026-92062: Privilege escalation in the Session Restore component.\n- CVE-2026-92064: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92065: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92067: Use-after-free in the Widget: Gtk component.\n- CVE-2026-92068: Site isolation issue in the Reader Mode component.\n- CVE-2026-92069: Spoofing issue in the DOM: Navigation component.\n- CVE-2026-92070: Information disclosure in the Networking component.\n- CVE-2026-92071: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92072: Incorrect boundary conditions in the Safe Browsing component.\n- CVE-2026-92073: Privilege escalation in the Enterprise Policies component.\n- CVE-2026-92074: Mitigation bypass in the Popup Blocker component.\n- CVE-2026-92075: Mitigation bypass in the Networking component.\n- CVE-2026-92076: Incorrect boundary conditions in the Networking component.\n- CVE-2026-92077: Denial-of-service in the SVG component.\n- CVE-2026-92078: Denial-of-service in the Security component.\n- CVE-2026-92079: Mitigation bypass in the Widget: Win32 component.\n","status":"published","published":"2026-09-24T13:08:50Z","modified":"2026-09-30T18:23:13.026306585Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:4247-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nUpdate to Firefox Extended Support Release 153.3.0 ESRi (MFSA 2026-93, bsc#1280371)\n \n- CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component.\n- CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92007: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92008: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92009: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92010: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92011: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92012: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92013: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92015: Privilege escalation in the WebExtensions component.\n- CVE-2026-92016: Use-after-free in the Disability Access APIs component.\n- CVE-2026-92017: Privilege escalation in the DOM: Service Workers component.\n- CVE-2026-92018: Sandbox escape in the DOM: Core \u0026 HTML component.\n- CVE-2026-92019: Mitigation bypass in the Remote Settings Client component.\n- CVE-2026-92020: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component.\n- CVE-2026-92022: Use-after-free in the DOM: HTML Parser component.\n- CVE-2026-92023: Use-after-free in the XML component.\n- CVE-2026-92024: Use-after-free in the SVG component.\n- CVE-2026-92025: Use-after-free in the DOM: Navigation component.\n- CVE-2026-92026: Use-after-free in the Networking component.\n- CVE-2026-92027: Use-after-free in the DOM: Streams component.\n- CVE-2026-92028: Use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-92029: Use-after-free in the SVG component.\n- CVE-2026-92030: Mitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component.\n- CVE-2026-92031: Information disclosure in the Graphics: ImageLib component.\n- CVE-2026-92032: Sandbox escape due to invalid pointer in the Graphics component.\n- CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component.\n- CVE-2026-92038: Mitigation bypass in the Remote Settings Client component.\n- CVE-2026-92039: Mitigation bypass in the DOM: Notifications component.\n- CVE-2026-92041: Mitigation bypass in the DOM: Networking component.\n- CVE-2026-92042: Race condition in the DOM: Content Processes component.\n- CVE-2026-92043: Privilege escalation due to incorrect boundary conditions in the Audio/Video component.\n- CVE-2026-92044: Information disclosure in the Networking: HTTP component.\n- CVE-2026-92045: Sandbox escape due to incorrect boundary conditions in the WebRTC component.\n- CVE-2026-92046: Use-after-free in the Graphics component.\n- CVE-2026-92047: Privilege escalation in the Crash Reporting component.\n- CVE-2026-92048: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92049: Use-after-free in the Widget: Win32 component.\n- CVE-2026-92052: Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component.\n- CVE-2026-92053: Privilege escalation in the Graphics: CanvasWebGL component.\n- CVE-2026-92054: Privilege escalation in the Memory component.\n- CVE-2026-92055: Privilege escalation in the DevTools component.\n- CVE-2026-92056: Use-after-free in the Graphics: Text component.\n- CVE-2026-92057: Mitigation bypass in the Enterprise Policies component.\n- CVE-2026-92058: Use-after-free in the Graphics component.\n- CVE-2026-92059: Incorrect boundary conditions in the DOM: Editor component.\n- CVE-2026-92060: Use-after-free in the Internationalization component.\n- CVE-2026-92062: Privilege escalation in the Session Restore component.\n- CVE-2026-92064: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92065: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92067: Use-after-free in the Widget: Gtk component.\n- CVE-2026-92068: Site isolation issue in the Reader Mode component.\n- CVE-2026-92069: Spoofing issue in the DOM: Navigation component.\n- CVE-2026-92070: Information disclosure in the Networking component.\n- CVE-2026-92071: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92072: Incorrect boundary conditions in the Safe Browsing component.\n- CVE-2026-92073: Privilege escalation in the Enterprise Policies component.\n- CVE-2026-92074: Mitigation bypass in the Popup Blocker component.\n- CVE-2026-92075: Mitigation bypass in the Networking component.\n- CVE-2026-92076: Incorrect boundary conditions in the Networking component.\n- CVE-2026-92077: Denial-of-service in the SVG component.\n- CVE-2026-92078: Denial-of-service in the Security component.\n- CVE-2026-92079: Mitigation bypass in the Widget: Win32 component.\n","status":"published","published":"2026-09-17T15:59:37Z","modified":"2026-09-18T10:00:04.766060982Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4264-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nUpdate to Firefox Extended Support Release 153.3.0 ESRi (MFSA 2026-93, bsc#1280371)\n \n- CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component.\n- CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92007: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92008: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92009: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92010: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92011: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92012: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92013: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92015: Privilege escalation in the WebExtensions component.\n- CVE-2026-92016: Use-after-free in the Disability Access APIs component.\n- CVE-2026-92017: Privilege escalation in the DOM: Service Workers component.\n- CVE-2026-92018: Sandbox escape in the DOM: Core \u0026 HTML component.\n- CVE-2026-92019: Mitigation bypass in the Remote Settings Client component.\n- CVE-2026-92020: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component.\n- CVE-2026-92022: Use-after-free in the DOM: HTML Parser component.\n- CVE-2026-92023: Use-after-free in the XML component.\n- CVE-2026-92024: Use-after-free in the SVG component.\n- CVE-2026-92025: Use-after-free in the DOM: Navigation component.\n- CVE-2026-92026: Use-after-free in the Networking component.\n- CVE-2026-92027: Use-after-free in the DOM: Streams component.\n- CVE-2026-92028: Use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-92029: Use-after-free in the SVG component.\n- CVE-2026-92030: Mitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component.\n- CVE-2026-92031: Information disclosure in the Graphics: ImageLib component.\n- CVE-2026-92032: Sandbox escape due to invalid pointer in the Graphics component.\n- CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component.\n- CVE-2026-92038: Mitigation bypass in the Remote Settings Client component.\n- CVE-2026-92039: Mitigation bypass in the DOM: Notifications component.\n- CVE-2026-92041: Mitigation bypass in the DOM: Networking component.\n- CVE-2026-92042: Race condition in the DOM: Content Processes component.\n- CVE-2026-92043: Privilege escalation due to incorrect boundary conditions in the Audio/Video component.\n- CVE-2026-92044: Information disclosure in the Networking: HTTP component.\n- CVE-2026-92045: Sandbox escape due to incorrect boundary conditions in the WebRTC component.\n- CVE-2026-92046: Use-after-free in the Graphics component.\n- CVE-2026-92047: Privilege escalation in the Crash Reporting component.\n- CVE-2026-92048: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92049: Use-after-free in the Widget: Win32 component.\n- CVE-2026-92052: Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component.\n- CVE-2026-92053: Privilege escalation in the Graphics: CanvasWebGL component.\n- CVE-2026-92054: Privilege escalation in the Memory component.\n- CVE-2026-92055: Privilege escalation in the DevTools component.\n- CVE-2026-92056: Use-after-free in the Graphics: Text component.\n- CVE-2026-92057: Mitigation bypass in the Enterprise Policies component.\n- CVE-2026-92058: Use-after-free in the Graphics component.\n- CVE-2026-92059: Incorrect boundary conditions in the DOM: Editor component.\n- CVE-2026-92060: Use-after-free in the Internationalization component.\n- CVE-2026-92062: Privilege escalation in the Session Restore component.\n- CVE-2026-92064: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92065: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92067: Use-after-free in the Widget: Gtk component.\n- CVE-2026-92068: Site isolation issue in the Reader Mode component.\n- CVE-2026-92069: Spoofing issue in the DOM: Navigation component.\n- CVE-2026-92070: Information disclosure in the Networking component.\n- CVE-2026-92071: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92072: Incorrect boundary conditions in the Safe Browsing component.\n- CVE-2026-92073: Privilege escalation in the Enterprise Policies component.\n- CVE-2026-92074: Mitigation bypass in the Popup Blocker component.\n- CVE-2026-92075: Mitigation bypass in the Networking component.\n- CVE-2026-92076: Incorrect boundary conditions in the Networking component.\n- CVE-2026-92077: Denial-of-service in the SVG component.\n- CVE-2026-92078: Denial-of-service in the Security component.\n- CVE-2026-92079: Mitigation bypass in the Widget: Win32 component.\n","status":"published","published":"2026-09-18T13:54:57Z","modified":"2026-09-19T09:00:04.393759444Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4627-1","title":"Security update for MozillaThunderbird","description":"This update for MozillaThunderbird fixes the following issues:\n\nUpdate to Mozilla Thunderbird 153.4 (MFSA 2026-96, MFSA 2026-103, bsc#1280371, bsc#1282929):\n\n- CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component.\n- CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92007: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92008: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92009: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92010: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92011: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92012: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92013: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-92015: Privilege escalation in the WebExtensions component.\n- CVE-2026-92016: Use-after-free in the Disability Access APIs component.\n- CVE-2026-92017: Privilege escalation in the DOM: Service Workers component.\n- CVE-2026-92018: Sandbox escape in the DOM: Core \u0026 HTML component.\n- CVE-2026-92019: Mitigation bypass in the Remote Settings Client component.\n- CVE-2026-92020: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component.\n- CVE-2026-92022: Use-after-free in the DOM: HTML Parser component.\n- CVE-2026-92023: Use-after-free in the XML component.\n- CVE-2026-92024: Use-after-free in the SVG component.\n- CVE-2026-92025: Use-after-free in the DOM: Navigation component.\n- CVE-2026-92026: Use-after-free in the Networking component.\n- CVE-2026-92027: Use-after-free in the DOM: Streams component.\n- CVE-2026-92028: Use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-92029: Use-after-free in the SVG component.\n- CVE-2026-92030: Mitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component.\n- CVE-2026-92031: Information disclosure in the Graphics: ImageLib component.\n- CVE-2026-92032: Sandbox escape due to invalid pointer in the Graphics component.\n- CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component.\n- CVE-2026-92038: Mitigation bypass in the Remote Settings Client component.\n- CVE-2026-92039: Mitigation bypass in the DOM: Notifications component.\n- CVE-2026-92041: Mitigation bypass in the DOM: Networking component.\n- CVE-2026-92042: Race condition in the DOM: Content Processes component.\n- CVE-2026-92043: Privilege escalation due to incorrect boundary conditions in the Audio/Video component.\n- CVE-2026-92044: Information disclosure in the Networking: HTTP component.\n- CVE-2026-92045: Sandbox escape due to incorrect boundary conditions in the WebRTC component.\n- CVE-2026-92046: Use-after-free in the Graphics component.\n- CVE-2026-92047: Privilege escalation in the Crash Reporting component.\n- CVE-2026-92048: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92049: Use-after-free in the Widget: Win32 component.\n- CVE-2026-92052: Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component.\n- CVE-2026-92053: Privilege escalation in the Graphics: CanvasWebGL component.\n- CVE-2026-92054: Privilege escalation in the Memory component.\n- CVE-2026-92055: Privilege escalation in the DevTools component.\n- CVE-2026-92056: Use-after-free in the Graphics: Text component.\n- CVE-2026-92057: Mitigation bypass in the Enterprise Policies component.\n- CVE-2026-92058: Use-after-free in the Graphics component.\n- CVE-2026-92059: Incorrect boundary conditions in the DOM: Editor component.\n- CVE-2026-92060: Use-after-free in the Internationalization component.\n- CVE-2026-92062: Privilege escalation in the Session Restore component.\n- CVE-2026-92064: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92065: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92067: Use-after-free in the Widget: Gtk component.\n- CVE-2026-92068: Site isolation issue in the Reader Mode component.\n- CVE-2026-92069: Spoofing issue in the DOM: Navigation component.\n- CVE-2026-92070: Information disclosure in the Networking component.\n- CVE-2026-92071: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-92072: Incorrect boundary conditions in the Safe Browsing component.\n- CVE-2026-92073: Privilege escalation in the Enterprise Policies component.\n- CVE-2026-92074: Mitigation bypass in the Popup Blocker component.\n- CVE-2026-92075: Mitigation bypass in the Networking component.\n- CVE-2026-92076: Incorrect boundary conditions in the Networking component.\n- CVE-2026-92077: Denial-of-service in the SVG component.\n- CVE-2026-92078: Denial-of-service in the Security component.\n- CVE-2026-92079: Mitigation bypass in the Widget: Win32 component.\n- CVE-2026-92238: Ambiguous parsing of mail headers.\n- CVE-2026-92239: Buffer overrun in IMAP.\n- CVE-2026-92240: Out-of-bounds read in IMAP response parser.\n- CVE-2026-96869: Information disclosure in the Networking component.\n- CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component.\n- CVE-2026-100757: Use-after-free in the Widget component.\n- CVE-2026-100758: Sandbox escape in the DOM: Navigation component.\n- CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component.\n- CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component.\n- CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component.\n- CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component.\n- CVE-2026-100766: Information disclosure in the Networking: JAR component.\n- CVE-2026-100767: Use-after-free in the Networking: Cache component.\n- CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component.\n- CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component.\n- CVE-2026-100771: Undefined behavior in the DOM: Streams component.\n- CVE-2026-100772: Use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-100773: Use-after-free in the Storage: IndexedDB component.\n- CVE-2026-100774: Use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-100775: Sandbox escape in the Graphics component.\n- CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component.\n- CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component.\n- CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-100779: Use-after-free in the XSLT component.\n- CVE-2026-100780: Use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.\n- CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component.\n- CVE-2026-100783: Uninitialized memory in the Audio/Video component.\n- CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component.\n- CVE-2026-100785: Use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component.\n- CVE-2026-100787: Sandbox escape in the XUL component.\n- CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component.\n- CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component.\n- CVE-2026-100790: Use-after-free in the XSLT component.\n- CVE-2026-100791: Use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component.\n- CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component.\n- CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component.\n- CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component.\n- CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component.\n- CVE-2026-100801: Privilege escalation in the DLL Services component.\n- CVE-2026-100803: Same-origin policy bypass in the WebExtensions component.\n- CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component.\n- CVE-2026-100807: Privilege escalation in the DOM: Service Workers component.\n- CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component.\n- CVE-2026-100809: Same-origin policy bypass in the DevTools component.\n- CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-100812: Denial-of-service in the Graphics component.\n- CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component.\n- CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component.\n- CVE-2026-100816: Site isolation issue in the DOM: Networking component.\n- CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component.\n- CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component.\n- CVE-2026-100820: Privilege escalation in the Address Bar component.\n- CVE-2026-100821: Site isolation issue in the Panning and Zooming component.\n- CVE-2026-100822: Spoofing issue in the Networking: HTTP component.\n- CVE-2026-100824: Privilege escalation in the Places component.\n- CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component.\n- CVE-2026-100826: Denial-of-service in the Storage: StorageManager component.\n- CVE-2026-100828: Mitigation bypass in the Bookmarks \u0026 History component.\n- CVE-2026-100829: Mitigation bypass in the DOM: Security component.\n- CVE-2026-100830: Mitigation bypass in the DOM: Navigation component.\n- CVE-2026-100831: Use-after-free in the DOM: UI Events \u0026 Focus Handling component.\n- CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component.\n- CVE-2026-103500: Heap buffer overflow opening large email.\n\nChanges for MozillaThunderbird:\n\n * changed: RNP command-line utilities are no longer included\n with Thunderbird (bmo#2068130)\n * changed: Thundermail built-in add-on updated to v2.0.16\n (bmo#2071989)\n * fixed: Ctrl+Shift+K could fail to open the Quick Filter UI\n (bmo#2062942)\n * fixed: Nested S/MIME signed parts could fail to render\n (bmo#2062971)\n * fixed: Thunderbird could hang when waiting for IMAP server\n greeting during account setup (bmo#2028760)\n * fixed: Gmail OAuth2 authentication could intermittently fail\n on Windows (bmo#2063816)\n * fixed: `AppUpdatePin` policy did not prevent Thunderbird from\n updating beyond pinned version (bmo#1910603)\n * fixed: 'What's New?' linked to Release channel notes instead\n of ESR release notes (bmo#2073813)\n * fixed: Detached attachment links were truncated when folder\n path contained `\u0026` (bmo#2060451)\n * fixed: Save All, Detach All, and Delete All failed after\n deleting one attachment (bmo#2057025)\n * fixed: Blank 1970-dated messages could appear from incomplete\n message file copies (bmo#209501)\n * fixed: Forwarded messages could display incorrect encoding\n (bmo#2059963)\n * fixed: Manual Get Messages failed after startup until\n toggling offline mode (bmo#2057431)\n * fixed: Thunderbird could crash on shutdown while waiting for\n OAuth2 password entry (bmo#1524247)\n","status":"published","published":"2026-10-12T14:57:41Z","modified":"2026-10-13T10:30:05.948962102Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}