cve-2018-12386

Firefox Sandboxed RCE Exploit CVE-2918-12386 Here is a simple exploit for the vulnerability CVE-2018-12386 found by Niklas Baumstark, Samuel Groß and Bruno Keith. This is mostly a Poc I did for fun, there is no sandbox bypass and it will only work on a given Linux setup where the offsets used by...

CLEANSTART-2024-ZC75438 There exists a use after free/double free in libwebp

Security vulnerability affects the firefox-esr package. There exists a use after free/double free in libwebp...

CLEANSTART-2024-RK56908 website could have obscured the fullscreen notification by using a combination of <code>window

Security vulnerability affects the firefox-esr package. A website could have obscured the fullscreen notification by using a combination of window...

CLEANSTART-2024-IT92973 local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server

Security vulnerability affects the firefox-esr package. A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server...

[SECURITY] [DLA 4866-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4866-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 29, 2026 https://wiki.debian.org/LTS -...

Debian dla-4866 : firefox-esr - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4866 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4866-1 [email protected]...

[SECURITY] [DSA 6590-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6590-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 28, 2026 https://www.debian.org/security/faq -...

SUSE CVE-2026-118027

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44...

PT-2026-132727

These are all security issues fixed in the firefox-esr-153.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-117999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. CVE-2026-117999 Not...

Linux Distros Unpatched Vulnerability : CVE-2026-117976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-117985

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-117986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. CVE-2026-11798...

Linux Distros Unpatched Vulnerability : CVE-2026-117947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. CVE-2026-117947 Not...

OPENSUSE-SU-2026:12319-1 firefox-esr-153.6.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-153.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-117989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. CVE-2026-11798...

Linux Distros Unpatched Vulnerability : CVE-2026-117972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. CVE-2026-11797...

SUSE CVE-2026-117889

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

SUSE CVE-2026-117945

Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

SUSE CVE-2026-117946

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...