ROS-20250922-07

The vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries as a result of an integer overflow. operation out of buffer boundaries in memory as a result of integer overflow. Exploitation of the vulnerability coul...

MozillaFirefox-143.0-1.1 on GA media (moderate)

MozillaFirefox-143.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15565-1 Rating: moderate Cross-References: CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10530 CVE-2025-10531 CVE-2025-10532 CVE-2025-10533 CVE-2025-10534 CVE-2025-10535 CVE-2025-10536 CVE-2025-10537 Affected Products:...

OPENSUSE-SU-2025:15565-1 MozillaFirefox-143.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-143.0-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the Site Permissions component in the Mozilla Firefox browser and the Thunderbird email client allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the Site Permissions component in the Mozilla Firefox browser and the Thunderbird email client is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS...

The vulnerability in the Layout component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code.

The vulnerability of the Layout component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the WebAuthn component in Mozilla Firefox’s browser and Thunderbird’s email client allows attackers to perform spear-phishing attacks.

The vulnerability of the WebAuthn component in Mozilla Firefox and the Thunderbird email client is related to deficiencies in the authentication process due to incorrect display of the domain name in the address bar. Exploiting this vulnerability can allow attackers to perform spear-phishing...

firefox: thunderbird: Same-origin policy bypass in the Layout component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue:...

firefox: thunderbird: Integer overflow in the SVG component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the SVG component...

firefox: thunderbird: Information disclosure in the Networking: Cache component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Networking: Cache component...

firefox: thunderbird: Same-origin policy bypass in the Layout component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue:...

[SECURITY] Fedora 41 Update: firefox-143.0-1.fc41

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Code execution vulnerability in multiple Mozilla products (CNVD-2025-24651)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A code...

Code execution vulnerability in multiple Mozilla products (CNVD-2025-26891)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A code...

Security Bypass Vulnerability in Multiple Mozilla Products (CNVD-2025-24652)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2025-260-02)

The version of mozilla-firefox installed on the remote host is prior to 140.3.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-260-02 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...

Security Bypass Vulnerability in Multiple Mozilla Products (CNVD-2025-24636)

MMozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A...

Information Disclosure Vulnerability in Multiple Mozilla Products (CNVD-2025-24653)

Mozilla Firefox is an open source web browser.Mozilla Thunderbird is a set of e-mail client software separate from the Mozilla Application Suite. The software supports IMAP, POP mail protocols and HTML mail format. An information disclosure vulnerability exists in several Mozilla products and is...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2025-260-03)

The version of mozilla-thunderbird installed on the remote host is prior to 140.3.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-260-03 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...

OPENSUSE-SU-2025:15560-1 MozillaThunderbird-140.3.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

Mozilla Focus for iOS Spoofing Vulnerability (CNVD-2025-24634)

Mozilla Focus is a browser for iOS devices from the Mozilla Foundation. Mozilla Focus for iOS suffers from a spoofing vulnerability that is caused by an error in the address bar component. An attacker can exploit the vulnerability to conduct spoofing attacks...