OPENSUSE-SU-2026:10218-1 MozillaThunderbird-140.7.2-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.7.2-1.1 package on the GA media of openSUSE Tumbleweed...

Slackware: Security Advisory (SSA:2026-047-04)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2026-047-04)

The version of mozilla-thunderbird installed on the remote host is prior to 140.7.2esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-047-04 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has...

Slackware Linux 15.0 / current mozilla-firefox Vulnerability (SSA:2026-047-03)

The version of mozilla-firefox installed on the remote host is prior to 140.7.1esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-047-03 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracte...

Slackware: Security Advisory (SSA:2026-047-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA90888 DoS vulnerability in Mozilla Firefox ESR

Heap buffer overflow vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to cause denial of service. Original advisories MFSA2026-10 Exploitation Related products Mozilla-Firefox-ESR CVE list CVE-2026-2447 unknown Solution Update to the latest version...

KLA90889 DoS vulnerability in Mozilla Thunderbird ESR

Heap buffer overflow vulnerability was found in Mozilla Thunderbird ESR. Malicious users can exploit this vulnerability to cause denial of service. Original advisories MFSA2026-11 Exploitation Related products Mozilla-Thunderbird-ESR CVE list CVE-2026-2447 unknown Solution Update to the latest...

Mozilla -- Heap buffer overflow

https://bugzilla.mozilla.org/showbug.cgi?id=2014390 reports: Heap buffer overflow in libvpx...

KLA90887 DoS vulnerability in Mozilla Thunderbird

Heap buffer overflow vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to cause denial of service. Original advisories MFSA2026-11 Exploitation Related products Mozilla-Thunderbird CVE list CVE-2026-2447 unknown Solution Update to the latest version...

Mozilla Firefox for iOS 安全漏洞

Mozilla Firefox for iOS is a web browser designed for iOS devices by the US-based Mozilla Foundation. A security vulnerability exists in Mozilla Firefox for iOS, which can be exploited by an attacker to cause the address bar and page content to be out of sync, allowing the attacker to forge...

Mozilla Firefox ESR < 115.32.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.32.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2026-10 advisory. - Heap buffer overflow in libvpx. This vulnerability affects Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR...

Mozilla Thunderbird < 140.7.2

The version of Thunderbird installed on the remote Windows host is prior to 140.7.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2026-11 advisory. - Heap buffer overflow in libvpx. This vulnerability affects Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1,...

CLSA-2026-1771112524 Update of alt-php

Update ca-certificates database to 20260129: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.82. - The following certificates were updated: Certificate "GlobalSign Root CA" Certificate "Entrust.net Premium 2048 Secure Server CA" Certificate "Comodo AAA...

CLSA-2026-1771005847 Update of alt-php

Update ca-certificates database to 20260129: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.82. - The following certificates were updated: Certificate "GlobalSign Root CA" Certificate "Entrust.net Premium 2048 Secure Server CA" Certificate "Comodo AAA...

KLA90932 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Memory safety vulnerability can be exploited to execute...

firefox: thunderbird: Use-after-free in the JavaScript Engine component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript Engine component...

firefox: Spoofing issue in the Downloads Panel component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the Downloads Panel component...

openSUSE Security Advisory (SUSE-SU-2026:0388-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2026:0388-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0388-1 advisory. Update to Mozilla Thunderbird 140.7.1 MFSA 2026-08 bsc1257397: - CVE-2026-0818: CSS-based exfiltration of...

SUSE-SU-2026:0388-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.7.1 MFSA 2026-08 bsc1257397: - CVE-2026-0818: CSS-based exfiltration of the content from partially encrypted emails when allowing remote content...