FreeBSD : Mozilla -- CORS circumvention (58027367-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 58027367-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: Thunderbird cached CORS preflight responses across IP address changes. Th...

FreeBSD : Mozilla -- XSLT document CSP bypass (4a357f4b-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4a357f4b-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: XSLT document loading did not correctly propagate the source document whi...

FreeBSD : Mozilla -- cookie shadowing (5abc2187-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5abc2187-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: Setting a nameless cookie with an equals sign in the value shadowed other...

FreeBSD : Mozilla -- Persisted search terms in the URL bar (6088905c-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6088905c-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: In some cases search terms persisted in the URL bar even after navigating...

FreeBSD : Mozilla -- 'javascript:' URLs execution (419bcf99-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 419bcf99-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: Thunderbird executed javascript: URLs when used in object and embed tags...

FreeBSD : Mozilla -- Memory safety bugs (4faa01cb-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4faa01cb-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12,...

FreeBSD : Mozilla -- nullptr dereference (4d03efe7-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4d03efe7-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: The JavaScript engine did not handle closed generators correctly and it w...

FreeBSD : Mozilla -- Memory safety bugs (55096bd3-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 55096bd3-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12,...

FreeBSD : Mozilla -- Ignored paths while checking navigations (5d91def0-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5d91def0-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: Thunderbird ignored paths when checking the validity of navigations in a...

FreeBSD : Mozilla -- Insufficient input escaping (44b3048b-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 44b3048b-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: Insufficient escaping in the Copy as cURL feature could potentially be us...

FreeBSD : Mozilla -- HTTP Basic Authentication credentials leak (477e9eb3-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 477e9eb3-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: The username:password part was not correctly stripped from URLs in CSP...

FreeBSD : Mozilla -- Multiple vulnerabilities (67c6461f-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 67c6461f-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: Memory safety bugs present in Firefox 140 and Thunderbird 140...

FreeBSD : Mozilla -- IonMonkey-JIT bad stack write (3c234220-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3c234220-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return...

MozillaFirefox-141.0-1.1 on GA media (moderate)

MozillaFirefox-141.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15386-1 Rating: moderate Cross-References: CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032 CVE-2025-8033 CVE-2025-8034 CVE-2025-8035 CVE-2025-8036 CVE-2025-8037 CVE-2025-8038 CVE-2025-8039...

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-SLE / etc (SUSE-SU-2025:02529-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02529-1 advisory. MozillaFirefox is updated to the 140ESR series. Firefox Extended Support Release 140.0esr ESR:...

OPENSUSE-SU-2025:15387-1 libmozjs-128-0-128.13.0-1.1 on GA media

These are all security issues fixed in the libmozjs-128-0-128.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

MozillaThunderbird-140.1.0-1.1 on GA media (moderate)

MozillaThunderbird-140.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15383-1 Rating: moderate Cross-References: CVE-2025-6427 CVE-2025-6432 CVE-2025-6433 CVE-2025-6434 CVE-2025-6435 CVE-2025-6436 CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032...

OPENSUSE-SU-2025:15386-1 MozillaFirefox-141.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-141.0-1.1 package on the GA media of openSUSE Tumbleweed...

Security Bypass Vulnerability in Multiple Mozilla Products (CNVD-2025-20064)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A security bypass vulnerability exists in several Mozilla products, whic...

Elevation of Privilege Vulnerability in Multiple Mozilla Products (CNVD-2025-20068)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An elevation of privilege vulnerability exists in several Mozilla...