99 matches found
Astra Linux – Vulnerability in Firefox, Thunderbird
In some code patterns, JIT incorrectly optimized switch statements and generated code that contained vulnerabilities related to out-of-bounds reads. This vulnerability affects Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-140.15.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...
Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2026-247-02)
The version of mozilla-firefox installed on the remote host is prior to 140.15.0esr / 153.2.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-247-02 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues...
OPENSUSE-SU-2026:11373-1 firefox-esr-153.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-153.0-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-16353 Invalid pointer in the DOM: Bindings (WebIDL) component
Invalid pointer in the DOM: Bindings WebIDL component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
CVE-2026-12325
A Denial-of-service vulnerability exists in the Graphics: ImageLib component of Mozilla products, including Firefox and Thunderbird . Attackers can exploit this flaw to cause a denial-of-service attack. This issue has been addressed in Firefox 152 , Firefox ESR 140.12 , Firefox ESR 115.37 , Thund...
CVE-2026-8091
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: Playback component...
Debian dla-4594 : thunderbird - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4594 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4594-1 [email protected]...
CVE-2026-8954
The Audio/Video component in Firefox and Thunderbird is vulnerable to an integer overflow caused by incorrect boundary conditions . This flaw allows attackers to perform operations beyond the buffer limits in memory, which can lead to the access of confidential data . Affected versions include Fi...
CVE-2026-8092 Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2
Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox...
CVE-2026-2778
Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
CVE-2026-2766
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
firefox security update
140.7.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.7.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.7.0-1 - Update to 140.7.0 ESR...
CVE-2026-0887
Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability affects Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...
CVE-2025-14323 Privilege escalation in the DOM: Notifications component
Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript: WebAssembly component...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-140.5.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...
thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This...
