Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libvpx: Heap buffer overflow in libvpx CVE-2026-2447 firefox: Invalid pointer in the JavaScript Engine component CVE-2026-2785 firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR...

RHEL 10 : thunderbird (RHSA-2026:3517)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:3517 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libvpx: Heap buffer overflow in libvpx CVE-2026-2447 firefox...

OESA-2026-1471 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...

SUSE-SU-2026:0692-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Update to Thunderbird 140.7.2 - CVE-2026-2447: Fixed a heap buffer overflow in libvpx. bsc1258231...

RHEL 8 : firefox (RHSA-2026:3338)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:3338 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libvpx: Heap...

SUSE: Security Advisory (SUSE-SU-2026:0602-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2026:20582-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.7.1 ESR was released: Fixed: Security fix. MFSA 2026-10 bsc1258231: CVE-2026-2447: Heap buffer overflow in libvpx...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-140.7.1esr-i686-1slack15.0.txz: Upgraded. This update contains a security fix: Heap buffer overflow in libvp...

Chromium: CVE-2026-1861 Heap buffer overflow in libvpx

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Google Chrome < 144.0.7559.132 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 144.0.7559.132. It is, therefore, affected by multiple vulnerabilities as referenced in the 202602stable-channel-update-for-desktop advisory. - Type Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a remot...

Google Chrome < 144.0.7559.132 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 144.0.7559.132. It is, therefore, affected by multiple vulnerabilities as referenced in the 202602stable-channel-update-for-desktop advisory. - Type Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a...

MiracleLinux 9 : thunderbird-115.3.1-1.el9.ML.1 (AXSA:2023-6492:28)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6492:28 advisory. firefox: use-after-free in workers CVE-2023-3600 Mozilla: Out-of-bounds write in PathOps CVE-2023-5169 Mozilla: Use-after-free in Ion Compiler...

MiracleLinux 8 : firefox-115.3.1-1.el8.ML.1 (AXSA:2023-6496:38)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6496:38 advisory. firefox: use-after-free in workers CVE-2023-3600 Mozilla: Out-of-bounds write in PathOps CVE-2023-5169 Mozilla: Use-after-free in Ion Compiler...

Important: thunderbird

Issue Overview: There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpximgalloc with a large value of the dw, dh, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpximaget struct may be...

Linux Distros Unpatched Vulnerability : CVE-2024-5197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpximgalloc with a large value of the dw, dh, or align parameter may result in...

Medium: firefox

Issue Overview: There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpximgalloc with a large value of the dw, dh, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpximaget struct may be...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the libvpx library, which is part of the mediaserver component in the Android operating system, arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a...

Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code or trigger service denial-of-service attacks

The vulnerability of the decreaserefcount function in the libvpx library in Firefox and Firefox ESR browsers is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures remotely...

Mozilla Firefox WebM Video Processing Buffer Overflow Vulnerability (CNVD-2015-05432)

Mozilla Firefox is an open source WEB browser. Mozilla Firefox handles WebM video with a Libvpx stock in buffer overflow vulnerability that allows remote attackers to construct malicious WEB pages and trick users into parsing them, which can crash the application or execute arbitrary code...