Umbra

This is the repo for Umbra browser dustribution. Umbra source code is not found here, we build umbra with a script named fern.js Out build system can be found here:https://github.com/openconstruct/user-agent-desktop Umbra is an opnionated privacy browser based on Mozilla Firefox ESR. All telemetr...

cve-2018-12386

Firefox Sandboxed RCE Exploit CVE-2918-12386 Here is a simple exploit for the vulnerability CVE-2018-12386 found by Niklas Baumstark, Samuel Groß and Bruno Keith. This is mostly a Poc I did for fun, there is no sandbox bypass and it will only work on a given Linux setup where the offsets used by...

firefox-esr-153.3.0-1.1 on GA media (moderate)

firefox-esr-153.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11796-1 Rating: moderate Cross-References: CVE-2026-92005 CVE-2026-92006 CVE-2026-92007 CVE-2026-92008 CVE-2026-92009 CVE-2026-92010 CVE-2026-92011 CVE-2026-92012 CVE-2026-92013 CVE-2026-92015 CVE-2026-92016 CVE-2026-92017...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.3.0 ESRi MFSA 2026-93, bsc1280371 CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the...

[SECURITY] [DLA 4781-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4781-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 17, 2026 https://wiki.debian.org/LTS -...

Debian dla-4781 : firefox-esr - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4781 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4781-1 [email protected]...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.16.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

[SECURITY] [DSA 6501-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6501-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 16, 2026 https://www.debian.org/security/faq -...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2026-259-01)

The version of mozilla-firefox installed on the remote host is prior to 140.16.0esr / 153.3.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-259-01 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues...

Debian dsa-6501 : firefox-esr - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6501 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6501-1 [email protected] https://www.debian.org/securit...

OPENSUSE-SU-2026:11796-1 firefox-esr-153.3.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-153.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-92077

Denial-of-service in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92079

Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92078

Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92076

Incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92075

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92072

Incorrect boundary conditions in the Safe Browsing component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92074

Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92073

Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92070

Information disclosure in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...