firefox security update

140.16.0-1.0.1 - Update to 140.16.0 ESR Orabug: 40189898CVE-2026-92005CVE-2026-92006 CVE-2026-92007CVE-2026-92008CVE-2026-92009CVE-2026-92010CVE-2026-92011 CVE-2026-92012CVE-2026-92013CVE-2026-92014CVE-2026-92015CVE-2026-92016 CVE-2026-92017CVE-2026-92018CVE-2026-92019CVE-2026-92020CVE-2026-92021...

CVE-2026-118027

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44...

firefox security update

140.14.0-1.0.1 - Update to 140.14.0 ESR Orabug: 40189882CVE-2026-74934CVE-2026-74935 CVE-2026-74936CVE-2026-74939CVE-2026-74940CVE-2026-74941CVE-2026-74942 CVE-2026-74943CVE-2026-74944CVE-2026-74945CVE-2026-74946CVE-2026-74948 CVE-2026-74949CVE-2026-74953CVE-2026-74957CVE-2026-74959CVE-2026-74960...

firefox-esr-153.5.1-1.1 on GA media (moderate)

firefox-esr-153.5.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:12211-1 Rating: moderate Cross-References: CVE-2026-113470 CVSS scores: CVE-2026-113470 SUSE : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

CLEANSTART-2024-AP56862 Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68

CVE-2020-6825 affects multiple packages. Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68. See references for individual vulnerability details...

CLEANSTART-2024-BE17041 Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68

CVE-2020-12395 affects multiple packages. Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68. See references for individual vulnerability details...

CLEANSTART-2024-RZ02688 Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78

CVE-2020-15683 affects multiple packages. Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78. See references for individual vulnerability details...

CLEANSTART-2024-AH25967 Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78

CVE-2020-35113 affects multiple packages. Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78. See references for individual vulnerability details...

CLEANSTART-2024-SM98727 Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78

CVE-2021-23964 affects multiple packages. Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78. See references for individual vulnerability details...

CLEANSTART-2024-YA43564 Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78

CVE-2021-23978 affects multiple packages. Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78. See references for individual vulnerability details...

CLEANSTART-2024-RE92969 Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78

CVE-2021-29967 affects multiple packages. Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78. See references for individual vulnerability details...

CLEANSTART-2024-RI47631 Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91

CVE-2021-38500 affects multiple packages. Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91. See references for individual vulnerability details...

CLEANSTART-2024-ZW64851 Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink reported memory safety bugs present in Firefox 95 an...

CVE-2022-22751 affects multiple packages. Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink reported memory safety bugs present in Firefox 95 and Firefox ESR 91. See references for individual...

CLEANSTART-2024-BJ30177 Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91

CVE-2022-29917 affects multiple packages. Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91. See references for individual vulnerability details...

CLEANSTART-2024-XI45731 Memory safety bugs present in Firefox 120, Firefox ESR 115

Security vulnerability affects the mozjs115 package. Memory safety bugs present in Firefox 120, Firefox ESR 115...

CLEANSTART-2024-SS93140 When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely

Security vulnerability affects the firefox-esr package. When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely...

CLEANSTART-2024-AC02551 use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash

Security vulnerability affects the firefox-esr package. A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash...

CLEANSTART-2024-VA85417 use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content

Security vulnerability affects the firefox-esr package. A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content...

CLEANSTART-2024-WA81095 use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash

Security vulnerability affects the firefox-esr package. A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash...

CLEANSTART-2024-RR99562 integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM

Security vulnerability affects the firefox-esr package. An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM...