Mozilla Firefox and Mozilla Thunderbird security vulnerabilities

Mozilla Firefox is an open source web browser.Mozilla Thunderbird is a set of e-mail client software separate from the Mozilla Application Suite. The software supports IMAP, POP mail protocols and HTML mail format. A code execution vulnerability exists in Mozilla Firefox and Mozilla Thunderbird,...

MozillaFirefox-147.0.4-1.1 on GA media (moderate)

MozillaFirefox-147.0.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10225-1 Rating: moderate Cross-References: CVE-2026-2447 CVSS scores: CVE-2026-2447 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-2447 SUSE : 9.2...

SUSE-SU-2026:20582-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.7.1 ESR was released: Fixed: Security fix. MFSA 2026-10 bsc1258231: CVE-2026-2447: Heap buffer overflow in libvpx...

OPENSUSE-SU-2026:20253-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.7.1 ESR was released: Fixed: Security fix. MFSA 2026-10 bsc1258231: CVE-2026-2447: Heap buffer overflow in libvpx...

OPENSUSE-SU-2026:10225-1 MozillaFirefox-147.0.4-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-147.0.4-1.1 package on the GA media of openSUSE Tumbleweed...

Messaging System Component Code Execution

The vulnerability of the Mozilla Firefox browser’s messaging system and the Thunderbird email client is related to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Slackware: Security Advisory (SSA:2026-047-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current mozilla-firefox Vulnerability (SSA:2026-047-03)

The version of mozilla-firefox installed on the remote host is prior to 140.7.1esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-047-03 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracte...

KLA90888 DoS vulnerability in Mozilla Firefox ESR

Heap buffer overflow vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to cause denial of service. Original advisories MFSA2026-10 Exploitation Related products Mozilla-Firefox-ESR CVE list CVE-2026-2447 unknown Solution Update to the latest version...

Mozilla Firefox for iOS security vulnerabilities

Mozilla Firefox for iOS is a web browser designed for iOS devices by the US-based Mozilla Foundation. A security vulnerability exists in Mozilla Firefox for iOS, which can be exploited by an attacker to cause the address bar and page content to be out of sync, allowing the attacker to forge...

Mozilla Firefox ESR < 115.32.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.32.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2026-10 advisory. - Heap buffer overflow in libvpx. This vulnerability affects Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR...

KLA90932 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Memory safety vulnerability can be exploited to execute...

firefox: thunderbird: Use-after-free in the JavaScript Engine component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript Engine component...

firefox: Spoofing issue in the Downloads Panel component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the Downloads Panel component...

firefox: thunderbird: Mitigation bypass in the DOM: Security component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Security component...

firefox: thunderbird: Sandbox escape due to integer overflow in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to integer overflow in the Graphics component...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2026-11795)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by attackers to bypass security restrictions...

RHEL 8 : firefox (RHSA-2026:2070)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:2070 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

OPENSUSE-SU-2026:10120-1 MozillaFirefox-147.0.2-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-147.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

Data Compromise component Anti-Tracking Mozilla Firefox

The vulnerability of the Privacy component in the Mozilla Firefox browser’s Anti-Tracking feature is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to compromise the integrity of the protected information...