CVE-2026-109783: Undefined Security Weakness

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5...

CVE-2026-109782: Undefined Security Weakness

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5...

PT-2026-111502

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 153.5 Thunderbird versions prior to 153.5 Description A mitigation bypass exists within the File Handling component. Recommendations Update Firefox ESR to version 153.5. Update Thunderbird to version 153.5...

CVE-2026-109716: Undefined Security Weakness

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

PT-2026-111503

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 153.5 Thunderbird versions prior to 153.5 Description A mitigation bypass exists within the File Handling component. Recommendations Update Firefox ESR to version 153.5. Update Thunderbird to version 153.5...

CVE-2026-109709: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109712: Undefined Security Weakness

Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109759: Undefined Security Weakness

Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

KLA91331 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1...

Mozilla Firefox ESR < 115.43

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.43. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-107 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's...

Mozilla Firefox ESR < 153.5

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 153.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-108 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's...

OPENSUSE-SU-2026:12116-1 firefox-esr-153.5.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-153.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

Security Vulnerabilities fixed in Firefox ESR 115.43 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109706: Use-after-free in the Storage: IndexedDB component Reporter Mozilla Impact high...

Security Vulnerabilities fixed in Firefox ESR 153.5 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109704: Privilege escalation in the Application Update component Reporter Noel Impact hi...

Mozilla Firefox ESR < 115.43

The version of Firefox ESR installed on the remote Windows host is prior to 115.43. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-107 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported...

Mozilla Firefox ESR < 153.5

The version of Firefox ESR installed on the remote Windows host is prior to 153.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-108 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported...

Astra Linux – Vulnerability in Firefox and Thunderbird

During operations on MessageTasks, a task may be removed while it is still scheduled, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.15, Thunderbird 91.2, Firefox ESR 91.2, Firefox ESR 78.15, and Firefox 93...

Astra Linux – Vulnerability in Firefox and Thunderbird

JIT compilation errors in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

Astra Linux – Vulnerability in Firefox and Thunderbird

A read operation outside of its bound range could have caused a crash in the RLBox Expat driver. This vulnerability affects Firefox 113, Firefox ESR 102.11, and Thunderbird 102.11...

Astra Linux – Vulnerability in Firefox and Thunderbird

The reordering of instructions resulted in a sequence of instructions that would cause an object to be incorrectly processed during garbage collection. This led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.1...