GHSA-9G78-X9V4-2GRP vulnerabilities

Vulnerabilities for packages: firefox-esr...

CVE-2026-109706 vulnerabilities

Vulnerabilities for packages: firefox-esr...

CVE-2026-109757 vulnerabilities

Vulnerabilities for packages: firefox-esr...

KLA91357 SB vulnerability in Mozilla Firefox ESR

Security bypass vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories MFSA2026-112 Exploitation Related products Mozilla-Firefox-ESR CVE list CVE-2026-113470 high Solution Update to the latest version...

KLA91363 SB vulnerability in Mozilla Firefox ESR

Security bypass vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories MFSA2026-113 Exploitation Related products Mozilla-Firefox-ESR CVE list CVE-2026-113470 high Solution Update to the latest version...

Mozilla Firefox ESR < 115.43.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.43.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2026-113 advisory. - Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was...

Mozilla Firefox ESR < 153.5.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 153.5.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2026-112 advisory. - Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was...

Security Vulnerabilities fixed in Firefox ESR 153.5.1 — Mozilla

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is...

Security Vulnerabilities fixed in Firefox ESR 115.43.1 — Mozilla

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is...

Mozilla Firefox ESR < 115.43.1

The version of Firefox ESR installed on the remote Windows host is prior to 115.43.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2026-113 advisory. - Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed t...

Mozilla Firefox ESR < 153.5.1

The version of Firefox ESR installed on the remote Windows host is prior to 153.5.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2026-112 advisory. - Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to...

Astra Linux – Vulnerability in Firefox, Thunderbird

Using techniques based on slipstream research, a malicious webpage could scan both the hosts of an internal network and the services running on the user’s local machine, using WebRTC connections. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...

Astra Linux – Vulnerability in Firefox, Thunderbird

Documents loaded with the CSP sandbox directive could have escaped the sandbox’s script restrictions by embedding additional content. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...

Astra Linux – Vulnerability in Firefox, Thunderbird

The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the top-level frame. This vulnerability affects Firefox 94, Thunderbird 91.3, and Firefox ESR 91.3...

Astra Linux – Vulnerability in Thunderbird, Firefox

A poorly handled security check during the creation of a WebSocket in a WebWorker caused the Content Security Policy’s connect-src header to be ignored. This could lead to connections being made to restricted origins from within WebWorkers. This vulnerability affects Firefox 109, Firefox ESR 102....

[SECURITY] [DLA 4836-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4836-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 15, 2026 https://wiki.debian.org/LTS -...

CVE-2026-109775

Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109707

Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

UBUNTU-CVE-2026-109744

Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109716

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...