KLA91252 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security vulnerability in the Remote Settings Client...

KLA91255 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Denial of service...

KLA91254 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...

KLA91248 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1...

CVE-2026-81267

creationtimestamp| type| source ---|---|--- 2026-08-31 21:22:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a4lekowg4ymlw 2026-09-01 13:55:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muhl4ljheo26 2026-09-02 04:47:29+00:00| seen|...

invisible_playwright v0.7.2

Free antidetect browser stealth for Playwright: undetected Firefox fingerprint, headless or headed. Python web scraping and captcha bypass. Open source, and it passes every bot detection test. How it works Anti-bots ask two questions, and reCAPTCHA, hCaptcha and Cloudflare Turnstile score the...

CVE-2026-81267

CVE-2026-81267 is a stalled popup cross-origin navigation vulnerability in Firefox for iOS . A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content — effective...

CVE-2026-81267 Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS

A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0...

CVE-2026-81267 Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS

A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0...

Updated nspr, nss, & firefox packages fix security vulnerabilities

Site isolation issue in the Graphics: CanvasWebGL component. CVE-2026-74934 Privilege escalation in the DOM: Networking component. CVE-2026-74935 Use-after-free in the JavaScript: WebAssembly component. CVE-2026-74936 Use-after-free in the JavaScript: GC component. CVE-2026-74937 Mitigation bypas...

MGASA-2026-0345 Updated nspr, nss, & firefox packages fix security vulnerabilities

Site isolation issue in the Graphics: CanvasWebGL component. CVE-2026-74934 Privilege escalation in the DOM: Networking component. CVE-2026-74935 Use-after-free in the JavaScript: WebAssembly component. CVE-2026-74936 Use-after-free in the JavaScript: GC component. CVE-2026-74937 Mitigation bypas...

SUSE-SU-2026:23411-1 Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen

This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. Fixed: Various security fixes. MFSA 2026-77 bsc1274867: CVE-2026-74934 Site isolation issue in the Graphics: CanvasWebGL...

OPENSUSE-SU-2026:21713-1 Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen

This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. Fixed: Various security fixes. MFSA 2026-77 bsc1274867: CVE-2026-74934 Site isolation issue in the Graphics: CanvasWebGL...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issue: Update to Mozilla Thunderbird 140.14. MFSA 2026-79 bsc1274867 CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74935: Privilege escalation in the DOM: Networking component CVE-2026-74936:...

SUSE-SU-2026:3897-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issue: Update to Mozilla Thunderbird 140.14. - MFSA 2026-79 bsc1274867 CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74935: Privilege escalation in the DOM: Networking component CVE-2026-74936:...

JSON Deserialiser Resource Consumption

This is a proof of concept exploit the researcher has been using for 15 years to demonstrate insecure deserialization with JSON. From: Daniel Owens via Fulldisclosure Date: Sat, 29 Aug 2026 00:11:02 +0000 On 26 October 2025 we published "Struts2 and Related Framework Array/Collection DoS", which...

Security Vulnerabilities fixed in Firefox for iOS 155.0 — Mozilla

A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content...

OESA-2026-3577 thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird...

OESA-2026-3576 thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird...

OESA-2026-3559 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...