Fedora 41 : thunderbird (2025-8e4e6cf21e)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8e4e6cf21e advisory. Update to 128.12.0 https://www.thunderbird.net/en-US/thunderbird/128.12.0esr/releasenotes/...

MozillaFirefox-140.0.2-1.1 on GA media (moderate)

MozillaFirefox-140.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:15325-1 Rating: moderate Cross-References: CVE-2025-6424 CVE-2025-6425 CVE-2025-6426 CVE-2025-6427 CVE-2025-6428 CVE-2025-6429 CVE-2025-6430 CVE-2025-6431 CVE-2025-6432 CVE-2025-6433 CVE-2025-6434 CVE-2025-6435 CVE-2025-6436...

CLSA-2025-1752082236 Update of alt-php

Update ca-certificates database to 20250416: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.74. - The following certificates were updated: Certificate "Entrust.net Premium 2048 Secure Server CA" Certificate "Entrust Root Certification Authority"...

CLSA-2025-1752059553 Update of alt-php

Update ca-certificates database to 20250416: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.74. - The following certificates were updated: Certificate "certSIGN ROOT CA" Certificate "ACCVRAIZ1" Certificate "Entrust Root Certification Authority - G4"...

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client allows a hacker to execute arbitrary code.

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

OPENSUSE-SU-2025:15325-1 MozillaFirefox-140.0.2-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-140.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : Mozilla -- persistent UUID that identifies browser (9320590b-58cf-11f0-b4ad-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9320590b-58cf-11f0-b4ad-b42e991fc52e advisory. [email protected] reports: An attacker who enumerated resources from the WebCompat extension could...

MozillaThunderbird-128.12.0-1.1 on GA media (moderate)

MozillaThunderbird-128.12.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15312-1 Rating: moderate Cross-References: CVE-2025-6424 CVE-2025-6425 CVE-2025-6426 CVE-2025-6429 CVE-2025-6430 CVSS scores: CVE-2025-6424 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-6424 SUSE : 8....

ROS-20250707-04

Vulnerability in FontFaceSet interface of Mozilla Firefox, Firefox ESR browsers is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service WebCompat extension vulnerability in Mozilla Firefox, Firefox ES...

OPENSUSE-SU-2025:15312-1 MozillaThunderbird-128.12.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.12.0-1.1 package on the GA media of openSUSE Tumbleweed...

MozillaThunderbird-128.11.1-2.1 on GA media (moderate)

MozillaThunderbird-128.11.1-2.1 on GA media Announcement ID: openSUSE-SU-2025:15204-1 Rating: moderate Cross-References: CVE-2025-5986 CVSS scores: CVE-2025-5986 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...

MozillaFirefox-139.0.4-1.1 on GA media (moderate)

MozillaFirefox-139.0.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15203-1 Rating: moderate Cross-References: CVE-2025-49709 CVE-2025-49710 CVSS scores: CVE-2025-49709 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVE-2025-49710 SUSE : 8.8...

Mozilla Firefox and Firefox ESR Security Bypass Vulnerability (CNVD-2025-15489)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by attackers to bypass security restrictions...

Memory Error Vulnerability in Multiple Mozilla Products

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A memory error vulnerability exists in several Mozilla products, which c...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2025-15500)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which originates from External App Open Prompt for Android can be bypassed and can be exploited by attackers to bypass security restrictions...

Mozilla Firefox and Firefox ESR Cross-Site Scripting Vulnerability (CNVD-2025-15493)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A cross-site scripting vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by an attacker to steal a victim's cookie-based authentication credential...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2025-15499)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which stems from the connect-src directive can be bypassed, and can be exploited by attackers to bypass security restrictions...

Information Disclosure Vulnerability in Multiple Mozilla Products (CNVD-2025-15491)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An information disclosure vulnerability exists in several Mozilla...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2025-15497)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which stems from a flaw in Multi-Account Containers, and can be exploited by attackers to bypass security restrictions...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2025-15502)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by attackers to bypass security restrictions...