Vulnerability-Lookup

OPENSUSE-SU-2026:11373-1

Vulnerability from csaf_opensuse - Published: 2026-07-25 00:00 - Updated: 2026-07-25 00:00

Summary

firefox-esr-153.0-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: firefox-esr-153.0-1.1 on GA media

Description of the patch: These are all security issues fixed in the firefox-esr-153.0-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2026-11373

CVE-2024-10468

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.0-1.1.x86_64	—	Vendor Fix

Threats

Impact critical

CVE-2024-11700

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2024-11701

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2024-11702

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2024-11703

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2024-11705

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2024-11706

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2024-11708

3.7 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2024-7523

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2024-7530

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2024-8388

5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact moderate

CVE-2024-8389

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2024-9391

7.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2024-9395

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2024-9403

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2024-9936

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2024-9956

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-0244

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-0245

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-0246

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-0247

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-1018

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-1019

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact moderate

CVE-2025-1020

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-10530

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-10531

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-10534

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-10535

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-11152

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-11153

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-11716

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-11717

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-11718

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-11719

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-11720

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-11721

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-12380

8.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13012

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13013

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13014

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13015

3.4 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13016

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13017

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13018

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13019

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13020

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13021

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13022

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13023

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13024

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13025

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13026

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13027

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-14326

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-14332

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-14860

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-14861

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-1939

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-1940

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-1941

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-1942

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-1943

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-3031

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-3032

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-3033

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-3034

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-3035

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-3608

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4082

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4083

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4085

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4086

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4087

5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4088

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4089

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4090

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4091

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4092

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-49709

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-49710

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-5270

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-5271

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-5272

7.3 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-8041

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact moderate

CVE-2025-8042

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact moderate

CVE-2025-8043

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-8044

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-9186

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-9187

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-0881

8.3 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-0888

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-0889

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-0892

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-10701

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact moderate

CVE-2026-10702

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-12293

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12300

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12301

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12303

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12316

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12317

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12318

7.3 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12319

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12320

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12321

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12322

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12323

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12326

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-14241

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16364

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16365

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16366

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16367

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16370

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16372

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16373

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16376

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16378

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16380

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16382

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16384

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16385

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16386

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16388

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16389

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16392

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16393

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16394

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16395

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16397

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16398

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16399

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16400

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16401

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16402

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16403

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16404

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16406

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16407

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16408

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16409

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16410

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16411

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-24868

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-24869

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2794

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2795

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2796

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2797

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2798

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2799

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2800

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2801

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2802

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2803

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2804

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2805

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2806

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2807

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-3846

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-3847

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4722

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4723

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4724

5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4725

5.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4726

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4727

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4728

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4729

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-5733

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-5735

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-6746

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6747

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6748

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6749

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6750

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6751

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6752

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6753

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6754

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6755

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6756

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6757

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6758

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6759

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6760

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6761

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6762

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6763

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6764

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6765

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6766

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6767

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6768

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6769

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6770

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6771

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6772

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6773

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6774

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6775

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6776

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6777

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6778

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6779

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6780

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6781

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6782

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6783

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6784

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6785

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6786

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-7324

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-8093

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8945

8.3 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8948

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8951

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8952

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8960

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8963

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8964

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8965

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8966

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8967

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8969

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8971

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8972

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8973

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

References

682 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2024-10468/	self
https://www.suse.com/security/cve/CVE-2024-11700/	self
https://www.suse.com/security/cve/CVE-2024-11701/	self
https://www.suse.com/security/cve/CVE-2024-11702/	self
https://www.suse.com/security/cve/CVE-2024-11703/	self
https://www.suse.com/security/cve/CVE-2024-11705/	self
https://www.suse.com/security/cve/CVE-2024-11706/	self
https://www.suse.com/security/cve/CVE-2024-11708/	self
https://www.suse.com/security/cve/CVE-2024-7523/	self
https://www.suse.com/security/cve/CVE-2024-7530/	self
https://www.suse.com/security/cve/CVE-2024-8388/	self
https://www.suse.com/security/cve/CVE-2024-8389/	self
https://www.suse.com/security/cve/CVE-2024-9391/	self
https://www.suse.com/security/cve/CVE-2024-9395/	self
https://www.suse.com/security/cve/CVE-2024-9403/	self
https://www.suse.com/security/cve/CVE-2024-9936/	self
https://www.suse.com/security/cve/CVE-2024-9956/	self
https://www.suse.com/security/cve/CVE-2025-0244/	self
https://www.suse.com/security/cve/CVE-2025-0245/	self
https://www.suse.com/security/cve/CVE-2025-0246/	self
https://www.suse.com/security/cve/CVE-2025-0247/	self
https://www.suse.com/security/cve/CVE-2025-1018/	self
https://www.suse.com/security/cve/CVE-2025-1019/	self
https://www.suse.com/security/cve/CVE-2025-1020/	self
https://www.suse.com/security/cve/CVE-2025-10530/	self
https://www.suse.com/security/cve/CVE-2025-10531/	self
https://www.suse.com/security/cve/CVE-2025-10534/	self
https://www.suse.com/security/cve/CVE-2025-10535/	self
https://www.suse.com/security/cve/CVE-2025-11152/	self
https://www.suse.com/security/cve/CVE-2025-11153/	self
https://www.suse.com/security/cve/CVE-2025-11716/	self
https://www.suse.com/security/cve/CVE-2025-11717/	self
https://www.suse.com/security/cve/CVE-2025-11718/	self
https://www.suse.com/security/cve/CVE-2025-11719/	self
https://www.suse.com/security/cve/CVE-2025-11720/	self
https://www.suse.com/security/cve/CVE-2025-11721/	self
https://www.suse.com/security/cve/CVE-2025-12380/	self
https://www.suse.com/security/cve/CVE-2025-13012/	self
https://www.suse.com/security/cve/CVE-2025-13013/	self
https://www.suse.com/security/cve/CVE-2025-13014/	self
https://www.suse.com/security/cve/CVE-2025-13015/	self
https://www.suse.com/security/cve/CVE-2025-13016/	self
https://www.suse.com/security/cve/CVE-2025-13017/	self
https://www.suse.com/security/cve/CVE-2025-13018/	self
https://www.suse.com/security/cve/CVE-2025-13019/	self
https://www.suse.com/security/cve/CVE-2025-13020/	self
https://www.suse.com/security/cve/CVE-2025-13021/	self
https://www.suse.com/security/cve/CVE-2025-13022/	self
https://www.suse.com/security/cve/CVE-2025-13023/	self
https://www.suse.com/security/cve/CVE-2025-13024/	self
https://www.suse.com/security/cve/CVE-2025-13025/	self
https://www.suse.com/security/cve/CVE-2025-13026/	self
https://www.suse.com/security/cve/CVE-2025-13027/	self
https://www.suse.com/security/cve/CVE-2025-14326/	self
https://www.suse.com/security/cve/CVE-2025-14332/	self
https://www.suse.com/security/cve/CVE-2025-14860/	self
https://www.suse.com/security/cve/CVE-2025-14861/	self
https://www.suse.com/security/cve/CVE-2025-1939/	self
https://www.suse.com/security/cve/CVE-2025-1940/	self
https://www.suse.com/security/cve/CVE-2025-1941/	self
https://www.suse.com/security/cve/CVE-2025-1942/	self
https://www.suse.com/security/cve/CVE-2025-1943/	self
https://www.suse.com/security/cve/CVE-2025-3031/	self
https://www.suse.com/security/cve/CVE-2025-3032/	self
https://www.suse.com/security/cve/CVE-2025-3033/	self
https://www.suse.com/security/cve/CVE-2025-3034/	self
https://www.suse.com/security/cve/CVE-2025-3035/	self
https://www.suse.com/security/cve/CVE-2025-3608/	self
https://www.suse.com/security/cve/CVE-2025-4082/	self
https://www.suse.com/security/cve/CVE-2025-4083/	self
https://www.suse.com/security/cve/CVE-2025-4085/	self
https://www.suse.com/security/cve/CVE-2025-4086/	self
https://www.suse.com/security/cve/CVE-2025-4087/	self
https://www.suse.com/security/cve/CVE-2025-4088/	self
https://www.suse.com/security/cve/CVE-2025-4089/	self
https://www.suse.com/security/cve/CVE-2025-4090/	self
https://www.suse.com/security/cve/CVE-2025-4091/	self
https://www.suse.com/security/cve/CVE-2025-4092/	self
https://www.suse.com/security/cve/CVE-2025-49709/	self
https://www.suse.com/security/cve/CVE-2025-49710/	self
https://www.suse.com/security/cve/CVE-2025-5270/	self
https://www.suse.com/security/cve/CVE-2025-5271/	self
https://www.suse.com/security/cve/CVE-2025-5272/	self
https://www.suse.com/security/cve/CVE-2025-8041/	self
https://www.suse.com/security/cve/CVE-2025-8042/	self
https://www.suse.com/security/cve/CVE-2025-8043/	self
https://www.suse.com/security/cve/CVE-2025-8044/	self
https://www.suse.com/security/cve/CVE-2025-9186/	self
https://www.suse.com/security/cve/CVE-2025-9187/	self
https://www.suse.com/security/cve/CVE-2026-0881/	self
https://www.suse.com/security/cve/CVE-2026-0888/	self
https://www.suse.com/security/cve/CVE-2026-0889/	self
https://www.suse.com/security/cve/CVE-2026-0892/	self
https://www.suse.com/security/cve/CVE-2026-10701/	self
https://www.suse.com/security/cve/CVE-2026-10702/	self
https://www.suse.com/security/cve/CVE-2026-12293/	self
https://www.suse.com/security/cve/CVE-2026-12300/	self
https://www.suse.com/security/cve/CVE-2026-12301/	self
https://www.suse.com/security/cve/CVE-2026-12303/	self
https://www.suse.com/security/cve/CVE-2026-12316/	self
https://www.suse.com/security/cve/CVE-2026-12317/	self
https://www.suse.com/security/cve/CVE-2026-12318/	self
https://www.suse.com/security/cve/CVE-2026-12319/	self
https://www.suse.com/security/cve/CVE-2026-12320/	self
https://www.suse.com/security/cve/CVE-2026-12321/	self
https://www.suse.com/security/cve/CVE-2026-12322/	self
https://www.suse.com/security/cve/CVE-2026-12323/	self
https://www.suse.com/security/cve/CVE-2026-12326/	self
https://www.suse.com/security/cve/CVE-2026-14241/	self
https://www.suse.com/security/cve/CVE-2026-16364/	self
https://www.suse.com/security/cve/CVE-2026-16365/	self
https://www.suse.com/security/cve/CVE-2026-16366/	self
https://www.suse.com/security/cve/CVE-2026-16367/	self
https://www.suse.com/security/cve/CVE-2026-16370/	self
https://www.suse.com/security/cve/CVE-2026-16372/	self
https://www.suse.com/security/cve/CVE-2026-16373/	self
https://www.suse.com/security/cve/CVE-2026-16376/	self
https://www.suse.com/security/cve/CVE-2026-16378/	self
https://www.suse.com/security/cve/CVE-2026-16380/	self
https://www.suse.com/security/cve/CVE-2026-16382/	self
https://www.suse.com/security/cve/CVE-2026-16384/	self
https://www.suse.com/security/cve/CVE-2026-16385/	self
https://www.suse.com/security/cve/CVE-2026-16386/	self
https://www.suse.com/security/cve/CVE-2026-16388/	self
https://www.suse.com/security/cve/CVE-2026-16389/	self
https://www.suse.com/security/cve/CVE-2026-16392/	self
https://www.suse.com/security/cve/CVE-2026-16393/	self
https://www.suse.com/security/cve/CVE-2026-16394/	self
https://www.suse.com/security/cve/CVE-2026-16395/	self
https://www.suse.com/security/cve/CVE-2026-16397/	self
https://www.suse.com/security/cve/CVE-2026-16398/	self
https://www.suse.com/security/cve/CVE-2026-16399/	self
https://www.suse.com/security/cve/CVE-2026-16400/	self
https://www.suse.com/security/cve/CVE-2026-16401/	self
https://www.suse.com/security/cve/CVE-2026-16402/	self
https://www.suse.com/security/cve/CVE-2026-16403/	self
https://www.suse.com/security/cve/CVE-2026-16404/	self
https://www.suse.com/security/cve/CVE-2026-16406/	self
https://www.suse.com/security/cve/CVE-2026-16407/	self
https://www.suse.com/security/cve/CVE-2026-16408/	self
https://www.suse.com/security/cve/CVE-2026-16409/	self
https://www.suse.com/security/cve/CVE-2026-16410/	self
https://www.suse.com/security/cve/CVE-2026-16411/	self
https://www.suse.com/security/cve/CVE-2026-24868/	self
https://www.suse.com/security/cve/CVE-2026-24869/	self
https://www.suse.com/security/cve/CVE-2026-2794/	self
https://www.suse.com/security/cve/CVE-2026-2795/	self
https://www.suse.com/security/cve/CVE-2026-2796/	self
https://www.suse.com/security/cve/CVE-2026-2797/	self
https://www.suse.com/security/cve/CVE-2026-2798/	self
https://www.suse.com/security/cve/CVE-2026-2799/	self
https://www.suse.com/security/cve/CVE-2026-2800/	self
https://www.suse.com/security/cve/CVE-2026-2801/	self
https://www.suse.com/security/cve/CVE-2026-2802/	self
https://www.suse.com/security/cve/CVE-2026-2803/	self
https://www.suse.com/security/cve/CVE-2026-2804/	self
https://www.suse.com/security/cve/CVE-2026-2805/	self
https://www.suse.com/security/cve/CVE-2026-2806/	self
https://www.suse.com/security/cve/CVE-2026-2807/	self
https://www.suse.com/security/cve/CVE-2026-3846/	self
https://www.suse.com/security/cve/CVE-2026-3847/	self
https://www.suse.com/security/cve/CVE-2026-4722/	self
https://www.suse.com/security/cve/CVE-2026-4723/	self
https://www.suse.com/security/cve/CVE-2026-4724/	self
https://www.suse.com/security/cve/CVE-2026-4725/	self
https://www.suse.com/security/cve/CVE-2026-4726/	self
https://www.suse.com/security/cve/CVE-2026-4727/	self
https://www.suse.com/security/cve/CVE-2026-4728/	self
https://www.suse.com/security/cve/CVE-2026-4729/	self
https://www.suse.com/security/cve/CVE-2026-5733/	self
https://www.suse.com/security/cve/CVE-2026-5735/	self
https://www.suse.com/security/cve/CVE-2026-6746/	self
https://www.suse.com/security/cve/CVE-2026-6747/	self
https://www.suse.com/security/cve/CVE-2026-6748/	self
https://www.suse.com/security/cve/CVE-2026-6749/	self
https://www.suse.com/security/cve/CVE-2026-6750/	self
https://www.suse.com/security/cve/CVE-2026-6751/	self
https://www.suse.com/security/cve/CVE-2026-6752/	self
https://www.suse.com/security/cve/CVE-2026-6753/	self
https://www.suse.com/security/cve/CVE-2026-6754/	self
https://www.suse.com/security/cve/CVE-2026-6755/	self
https://www.suse.com/security/cve/CVE-2026-6756/	self
https://www.suse.com/security/cve/CVE-2026-6757/	self
https://www.suse.com/security/cve/CVE-2026-6758/	self
https://www.suse.com/security/cve/CVE-2026-6759/	self
https://www.suse.com/security/cve/CVE-2026-6760/	self
https://www.suse.com/security/cve/CVE-2026-6761/	self
https://www.suse.com/security/cve/CVE-2026-6762/	self
https://www.suse.com/security/cve/CVE-2026-6763/	self
https://www.suse.com/security/cve/CVE-2026-6764/	self
https://www.suse.com/security/cve/CVE-2026-6765/	self
https://www.suse.com/security/cve/CVE-2026-6766/	self
https://www.suse.com/security/cve/CVE-2026-6767/	self
https://www.suse.com/security/cve/CVE-2026-6768/	self
https://www.suse.com/security/cve/CVE-2026-6769/	self
https://www.suse.com/security/cve/CVE-2026-6770/	self
https://www.suse.com/security/cve/CVE-2026-6771/	self
https://www.suse.com/security/cve/CVE-2026-6772/	self
https://www.suse.com/security/cve/CVE-2026-6773/	self
https://www.suse.com/security/cve/CVE-2026-6774/	self
https://www.suse.com/security/cve/CVE-2026-6775/	self
https://www.suse.com/security/cve/CVE-2026-6776/	self
https://www.suse.com/security/cve/CVE-2026-6777/	self
https://www.suse.com/security/cve/CVE-2026-6778/	self
https://www.suse.com/security/cve/CVE-2026-6779/	self
https://www.suse.com/security/cve/CVE-2026-6780/	self
https://www.suse.com/security/cve/CVE-2026-6781/	self
https://www.suse.com/security/cve/CVE-2026-6782/	self
https://www.suse.com/security/cve/CVE-2026-6783/	self
https://www.suse.com/security/cve/CVE-2026-6784/	self
https://www.suse.com/security/cve/CVE-2026-6785/	self
https://www.suse.com/security/cve/CVE-2026-6786/	self
https://www.suse.com/security/cve/CVE-2026-7324/	self
https://www.suse.com/security/cve/CVE-2026-8093/	self
https://www.suse.com/security/cve/CVE-2026-8945/	self
https://www.suse.com/security/cve/CVE-2026-8948/	self
https://www.suse.com/security/cve/CVE-2026-8951/	self
https://www.suse.com/security/cve/CVE-2026-8952/	self
https://www.suse.com/security/cve/CVE-2026-8960/	self
https://www.suse.com/security/cve/CVE-2026-8963/	self
https://www.suse.com/security/cve/CVE-2026-8964/	self
https://www.suse.com/security/cve/CVE-2026-8965/	self
https://www.suse.com/security/cve/CVE-2026-8966/	self
https://www.suse.com/security/cve/CVE-2026-8967/	self
https://www.suse.com/security/cve/CVE-2026-8969/	self
https://www.suse.com/security/cve/CVE-2026-8971/	self
https://www.suse.com/security/cve/CVE-2026-8972/	self
https://www.suse.com/security/cve/CVE-2026-8973/	self
https://www.suse.com/security/cve/CVE-2024-10468	external
https://bugzilla.suse.com/1231879	external
https://www.suse.com/security/cve/CVE-2024-11700	external
https://bugzilla.suse.com/1233695	external
https://www.suse.com/security/cve/CVE-2024-11701	external
https://bugzilla.suse.com/1233695	external
https://www.suse.com/security/cve/CVE-2024-11702	external
https://bugzilla.suse.com/1233695	external
https://www.suse.com/security/cve/CVE-2024-11703	external
https://bugzilla.suse.com/1233695	external
https://www.suse.com/security/cve/CVE-2024-11705	external
https://bugzilla.suse.com/1233695	external
https://www.suse.com/security/cve/CVE-2024-11706	external
https://bugzilla.suse.com/1233695	external
https://www.suse.com/security/cve/CVE-2024-11708	external
https://bugzilla.suse.com/1233695	external
https://www.suse.com/security/cve/CVE-2024-7523	external
https://bugzilla.suse.com/1228648	external
https://www.suse.com/security/cve/CVE-2024-7530	external
https://bugzilla.suse.com/1228648	external
https://www.suse.com/security/cve/CVE-2024-8388	external
https://www.suse.com/security/cve/CVE-2024-8389	external
https://bugzilla.suse.com/1229821	external
https://www.suse.com/security/cve/CVE-2024-9391	external
https://bugzilla.suse.com/1230979	external
https://www.suse.com/security/cve/CVE-2024-9395	external
https://bugzilla.suse.com/1230979	external
https://www.suse.com/security/cve/CVE-2024-9403	external
https://bugzilla.suse.com/1230979	external
https://www.suse.com/security/cve/CVE-2024-9936	external
https://bugzilla.suse.com/1231641	external
https://www.suse.com/security/cve/CVE-2024-9956	external
https://bugzilla.suse.com/1231694	external
https://www.suse.com/security/cve/CVE-2025-0244	external
https://bugzilla.suse.com/1234991	external
https://www.suse.com/security/cve/CVE-2025-0245	external
https://bugzilla.suse.com/1234991	external
https://www.suse.com/security/cve/CVE-2025-0246	external
https://bugzilla.suse.com/1234991	external
https://www.suse.com/security/cve/CVE-2025-0247	external
https://bugzilla.suse.com/1234991	external
https://www.suse.com/security/cve/CVE-2025-1018	external
https://bugzilla.suse.com/1236539	external
https://www.suse.com/security/cve/CVE-2025-1019	external
https://bugzilla.suse.com/1236539	external
https://www.suse.com/security/cve/CVE-2025-1020	external
https://bugzilla.suse.com/1236539	external
https://www.suse.com/security/cve/CVE-2025-10530	external
https://bugzilla.suse.com/1249391	external
https://www.suse.com/security/cve/CVE-2025-10531	external
https://bugzilla.suse.com/1249391	external
https://www.suse.com/security/cve/CVE-2025-10534	external
https://bugzilla.suse.com/1249391	external
https://www.suse.com/security/cve/CVE-2025-10535	external
https://bugzilla.suse.com/1249391	external
https://www.suse.com/security/cve/CVE-2025-11152	external
https://bugzilla.suse.com/1250678	external
https://www.suse.com/security/cve/CVE-2025-11153	external
https://bugzilla.suse.com/1250678	external
https://www.suse.com/security/cve/CVE-2025-11716	external
https://bugzilla.suse.com/1251263	external
https://www.suse.com/security/cve/CVE-2025-11717	external
https://bugzilla.suse.com/1251263	external
https://www.suse.com/security/cve/CVE-2025-11718	external
https://bugzilla.suse.com/1251263	external
https://www.suse.com/security/cve/CVE-2025-11719	external
https://bugzilla.suse.com/1251263	external
https://www.suse.com/security/cve/CVE-2025-11720	external
https://bugzilla.suse.com/1251263	external
https://www.suse.com/security/cve/CVE-2025-11721	external
https://bugzilla.suse.com/1251263	external
https://www.suse.com/security/cve/CVE-2025-12380	external
https://bugzilla.suse.com/1252815	external
https://www.suse.com/security/cve/CVE-2025-13012	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13013	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13014	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13015	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13016	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13017	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13018	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13019	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13020	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13021	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13022	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13023	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13024	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13025	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13026	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13027	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-14326	external
https://bugzilla.suse.com/1254551	external
https://www.suse.com/security/cve/CVE-2025-14332	external
https://bugzilla.suse.com/1254551	external
https://www.suse.com/security/cve/CVE-2025-14860	external
https://bugzilla.suse.com/1255367	external
https://www.suse.com/security/cve/CVE-2025-14861	external
https://bugzilla.suse.com/1255367	external
https://www.suse.com/security/cve/CVE-2025-1939	external
https://bugzilla.suse.com/1238886	external
https://www.suse.com/security/cve/CVE-2025-1940	external
https://bugzilla.suse.com/1238886	external
https://www.suse.com/security/cve/CVE-2025-1941	external
https://bugzilla.suse.com/1238886	external
https://www.suse.com/security/cve/CVE-2025-1942	external
https://bugzilla.suse.com/1238886	external
https://www.suse.com/security/cve/CVE-2025-1943	external
https://bugzilla.suse.com/1238886	external
https://www.suse.com/security/cve/CVE-2025-3031	external
https://bugzilla.suse.com/1240083	external
https://www.suse.com/security/cve/CVE-2025-3032	external
https://bugzilla.suse.com/1240083	external
https://www.suse.com/security/cve/CVE-2025-3033	external
https://www.suse.com/security/cve/CVE-2025-3034	external
https://bugzilla.suse.com/1240083	external
https://www.suse.com/security/cve/CVE-2025-3035	external
https://bugzilla.suse.com/1240083	external
https://www.suse.com/security/cve/CVE-2025-3608	external
https://bugzilla.suse.com/1241277	external
https://www.suse.com/security/cve/CVE-2025-4082	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4083	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4085	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4086	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4087	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4088	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4089	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4090	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4091	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4092	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-49709	external
https://bugzilla.suse.com/1244468	external
https://www.suse.com/security/cve/CVE-2025-49710	external
https://bugzilla.suse.com/1244468	external
https://www.suse.com/security/cve/CVE-2025-5270	external
https://bugzilla.suse.com/1243353	external
https://www.suse.com/security/cve/CVE-2025-5271	external
https://bugzilla.suse.com/1243353	external
https://www.suse.com/security/cve/CVE-2025-5272	external
https://bugzilla.suse.com/1243353	external
https://www.suse.com/security/cve/CVE-2025-8041	external
https://www.suse.com/security/cve/CVE-2025-8042	external
https://www.suse.com/security/cve/CVE-2025-8043	external
https://bugzilla.suse.com/1246664	external
https://www.suse.com/security/cve/CVE-2025-8044	external
https://bugzilla.suse.com/1246664	external
https://www.suse.com/security/cve/CVE-2025-9186	external
https://bugzilla.suse.com/1248162	external
https://www.suse.com/security/cve/CVE-2025-9187	external
https://bugzilla.suse.com/1248162	external
https://www.suse.com/security/cve/CVE-2026-0881	external
https://bugzilla.suse.com/1256340	external
https://www.suse.com/security/cve/CVE-2026-0888	external
https://bugzilla.suse.com/1256340	external
https://www.suse.com/security/cve/CVE-2026-0889	external
https://bugzilla.suse.com/1256340	external
https://www.suse.com/security/cve/CVE-2026-0892	external
https://bugzilla.suse.com/1256340	external
https://www.suse.com/security/cve/CVE-2026-10701	external
https://bugzilla.suse.com/1267841	external
https://www.suse.com/security/cve/CVE-2026-10702	external
https://bugzilla.suse.com/1267841	external
https://www.suse.com/security/cve/CVE-2026-12293	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12300	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12301	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12303	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12316	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12317	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12318	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12319	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12320	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12321	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12322	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12323	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12326	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-14241	external
https://bugzilla.suse.com/1270286	external
https://www.suse.com/security/cve/CVE-2026-16364	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16365	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16366	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16367	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16370	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16372	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16373	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16376	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16378	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16380	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16382	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16384	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16385	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16386	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16388	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16389	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16392	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16393	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16394	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16395	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16397	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16398	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16399	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16400	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16401	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16402	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16403	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16404	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16406	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16407	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16408	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16409	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16410	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16411	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-24868	external
https://bugzilla.suse.com/1257363	external
https://www.suse.com/security/cve/CVE-2026-24869	external
https://bugzilla.suse.com/1257363	external
https://www.suse.com/security/cve/CVE-2026-2794	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2795	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2796	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2797	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2798	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2799	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2800	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2801	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2802	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2803	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2804	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2805	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2806	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2807	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-3846	external
https://bugzilla.suse.com/1259500	external
https://www.suse.com/security/cve/CVE-2026-3847	external
https://bugzilla.suse.com/1259500	external
https://www.suse.com/security/cve/CVE-2026-4722	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-4723	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-4724	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-4725	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-4726	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-4727	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-4728	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-4729	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-5733	external
https://bugzilla.suse.com/1261663	external
https://www.suse.com/security/cve/CVE-2026-5735	external
https://bugzilla.suse.com/1261663	external
https://www.suse.com/security/cve/CVE-2026-6746	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6747	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6748	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6749	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6750	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6751	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6752	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6753	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6754	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6755	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6756	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6757	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6758	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6759	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6760	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6761	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6762	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6763	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6764	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6765	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6766	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6767	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6768	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6769	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6770	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6771	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6772	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6773	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6774	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6775	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6776	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6777	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6778	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6779	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6780	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6781	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6782	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6783	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6784	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6785	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6786	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-7324	external
https://bugzilla.suse.com/1263110	external
https://www.suse.com/security/cve/CVE-2026-8093	external
https://bugzilla.suse.com/1264378	external
https://www.suse.com/security/cve/CVE-2026-8945	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8948	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8951	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8952	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8960	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8963	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8964	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8965	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8966	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8967	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8969	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8971	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8972	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8973	external
https://bugzilla.suse.com/1265212	external

JSON

To clipboard

Loading 1.1 MB of JSON…

CVE-2026-0888 (GCVE-0-2026-0888)

Vulnerability from cvelistv5 – Published: 2026-01-13 13:30 – Updated: 2026-04-13 13:52

Title

Information disclosure in the XML component

Summary

Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-13 20:29 UTC

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

mozilla mitre root

References

3 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1985996
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 147 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 147 , ≤ * (rpm)

Credits

Pier Angelo Vendrame

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-0888",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-13T20:29:19.499227Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-13T20:29:51.820Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "147",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "147",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Pier Angelo Vendrame"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147."
            }
          ],
          "value": "Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T13:52:02.777Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1985996"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/"
        }
      ],
      "title": "Information disclosure in the XML component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-0888",
    "datePublished": "2026-01-13T13:30:58.296Z",
    "dateReserved": "2026-01-13T13:30:58.095Z",
    "dateUpdated": "2026-04-13T13:52:02.777Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0889 (GCVE-0-2026-0889)

Vulnerability from cvelistv5 – Published: 2026-01-13 13:30 – Updated: 2026-04-13 13:52

Title

Denial-of-service in the DOM: Service Workers component

Summary

Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-13 20:30 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

mozilla mitre root

References

3 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1999084
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 147 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 147 , ≤ * (rpm)

Credits

Elysee Franchuk, Caleb Lerch

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-0889",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-13T20:30:08.189012Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-13T20:30:28.179Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "147",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "147",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Elysee Franchuk, Caleb Lerch"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147."
            }
          ],
          "value": "Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T13:52:05.389Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1999084"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/"
        }
      ],
      "title": "Denial-of-service in the DOM: Service Workers component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-0889",
    "datePublished": "2026-01-13T13:30:58.675Z",
    "dateReserved": "2026-01-13T13:30:58.498Z",
    "dateUpdated": "2026-04-13T13:52:05.389Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0892 (GCVE-0-2026-0892)

Vulnerability from cvelistv5 – Published: 2026-01-13 13:30 – Updated: 2026-04-13 13:52

Title

Memory safety bugs fixed in Firefox 147 and Thunderbird 147

Summary

Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147 and Thunderbird 147.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-15 04:56 UTC

CWE

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

mozilla mitre root

References

3 references

URL	Tags
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 147 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 147 , ≤ * (rpm)

Credits

Hiroyuki Ikezoe, Jon Coppeard, Maurice Dauer and the Mozilla Fuzzing Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-0892",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-15T04:56:04.101715Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T15:04:46.714Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "147",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "147",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Hiroyuki Ikezoe, Jon Coppeard, Maurice Dauer and the Mozilla Fuzzing Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147 and Thunderbird 147."
            }
          ],
          "value": "Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147 and Thunderbird 147."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T13:52:12.599Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox 147 and Thunderbird 147",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1986912%2C1996718%2C1999633%2C2001081%2C2004443"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/"
        }
      ],
      "title": "Memory safety bugs fixed in Firefox 147 and Thunderbird 147"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-0892",
    "datePublished": "2026-01-13T13:30:59.874Z",
    "dateReserved": "2026-01-13T13:30:59.693Z",
    "dateUpdated": "2026-04-13T13:52:12.599Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-10701 (GCVE-0-2026-10701)

Vulnerability from cvelistv5 – Published: 2026-06-02 17:15 – Updated: 2026-07-15 01:23

Title

Incorrect boundary conditions in the Graphics: Text component

Summary

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-03 17:31 UTC

CWE

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-131 - Incorrect Calculation of Buffer Size

Assigner

mozilla mitre root

References

5 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=2038537
https://www.mozilla.org/security/advisories/mfsa2…
https://access.redhat.com/security/cve/CVE-2026-10701	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2484105	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex

Impacted products

6 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 151.0.3 , ≤ * (rpm)
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Credits

taiho kim

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-10701",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-03T17:31:53.525188Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-03T17:32:25.265Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel10/firefox-flatpak",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-02T17:15:59.828Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Firefox. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nIncorrect boundary conditions in the Graphics: Text component"
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-131",
                "description": "Incorrect Calculation of Buffer Size",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T01:23:28.871Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-10701"
          },
          {
            "name": "RHBZ#2484105",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484105"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10701.json"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-02T20:01:33.052Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-02T17:15:59.828Z",
            "value": "Made public."
          }
        ],
        "title": "firefox: Incorrect boundary conditions in the Graphics: Text component",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "151.0.3",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "taiho kim"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3."
            }
          ],
          "value": "Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-02T17:15:59.828Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2038537"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-54/"
        }
      ],
      "title": "Incorrect boundary conditions in the Graphics: Text component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-10701",
    "datePublished": "2026-06-02T17:15:59.828Z",
    "dateReserved": "2026-06-02T17:12:56.980Z",
    "dateUpdated": "2026-07-15T01:23:28.871Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-10702 (GCVE-0-2026-10702)

Vulnerability from cvelistv5 – Published: 2026-06-02 17:16 – Updated: 2026-07-15 01:23

Title

JIT miscompilation in the JavaScript Engine: JIT component

Summary

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-03 15:13 UTC

CWE

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
CWE-733 - Compiler Optimization Removal or Modification of Security-critical Code

Assigner

mozilla mitre root

References

5 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=2040903
https://www.mozilla.org/security/advisories/mfsa2…
https://access.redhat.com/security/cve/CVE-2026-10702	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2484118	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex

Impacted products

6 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 151.0.3 , ≤ * (rpm)
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Credits

Nebula Security

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-10702",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-03T15:13:53.535767Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-843",
                "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-03T15:17:51.325Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel10/firefox-flatpak",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-02T17:16:00.917Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Firefox. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nJIT miscompilation in the JavaScript Engine: JIT component"
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-733",
                "description": "Compiler Optimization Removal or Modification of Security-critical Code",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T01:23:26.525Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-10702"
          },
          {
            "name": "RHBZ#2484118",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484118"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10702.json"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-02T20:02:16.547Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-02T17:16:00.917Z",
            "value": "Made public."
          }
        ],
        "title": "firefox: JIT miscompilation in the JavaScript Engine: JIT component",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "151.0.3",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Nebula Security"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3."
            }
          ],
          "value": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-02T17:16:00.917Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2040903"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-54/"
        }
      ],
      "title": "JIT miscompilation in the JavaScript Engine: JIT component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-10702",
    "datePublished": "2026-06-02T17:16:00.917Z",
    "dateReserved": "2026-06-02T17:12:59.021Z",
    "dateUpdated": "2026-07-15T01:23:26.525Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12293 (GCVE-0-2026-12293)

Vulnerability from cvelistv5 – Published: 2026-06-16 11:52 – Updated: 2026-07-15 01:22

Title

Use-after-free in the Graphics: WebGPU component

Summary

Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-18 14:25 UTC

CWE

CWE-416 - Use After Free
CWE-825 - Expired Pointer Dereference

Assigner

mozilla mitre root

References

6 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=2039568
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://access.redhat.com/security/cve/CVE-2026-12293	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2489216	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex

Impacted products

7 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 152 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 152 , ≤ * (rpm)
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Credits

superhei

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12293",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-18T14:25:08.429325Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-18T16:11:19.122Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel10/firefox-flatpak",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel10/thunderbird-flatpak",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "thunderbird",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "thunderbird",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "thunderbird",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "thunderbird",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "thunderbird",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-16T11:52:26.913Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Graphics: WebGPU component"
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-825",
                "description": "Expired Pointer Dereference",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T01:22:39.986Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-12293"
          },
          {
            "name": "RHBZ#2489216",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489216"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12293.json"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-16T14:01:24.738Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-16T11:52:26.913Z",
            "value": "Made public."
          }
        ],
        "title": "firefox: thunderbird: Use-after-free in the Graphics: WebGPU component",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "152",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "152",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "superhei"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152."
            }
          ],
          "value": "Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-16T16:08:26.090Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2039568"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-57/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-60/"
        }
      ],
      "title": "Use-after-free in the Graphics: WebGPU component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-12293",
    "datePublished": "2026-06-16T11:52:26.913Z",
    "dateReserved": "2026-06-15T15:08:07.470Z",
    "dateUpdated": "2026-07-15T01:22:39.986Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12300 (GCVE-0-2026-12300)

Vulnerability from cvelistv5 – Published: 2026-06-16 11:52 – Updated: 2026-06-18 18:00

Title

Memory safety bug fixed in Firefox 152

Summary

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-16 17:26 UTC

CWE

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

mozilla mitre root

References

3 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1704114
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 152 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 152 , ≤ * (rpm)

Credits

Niklas

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12300",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-16T17:26:03.760142Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-16T17:26:49.986Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "152",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "152",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Niklas"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152."
            }
          ],
          "value": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-18T18:00:47.294Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1704114"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-57/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-60/"
        }
      ],
      "title": "Memory safety bug fixed in Firefox 152"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-12300",
    "datePublished": "2026-06-16T11:52:33.863Z",
    "dateReserved": "2026-06-15T15:08:10.596Z",
    "dateUpdated": "2026-06-18T18:00:47.294Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12301 (GCVE-0-2026-12301)

Vulnerability from cvelistv5 – Published: 2026-06-16 11:52 – Updated: 2026-06-18 18:00

Title

Memory safety bug fixed in Firefox 152

Summary

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-16 17:27 UTC

CWE

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

mozilla mitre root

References

3 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=2015647
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 152 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 152 , ≤ * (rpm)

Credits

Richard Belisle

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12301",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-16T17:27:03.360766Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-16T17:27:44.894Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "152",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "152",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Richard Belisle"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152."
            }
          ],
          "value": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-18T18:00:47.853Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2015647"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-57/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-60/"
        }
      ],
      "title": "Memory safety bug fixed in Firefox 152"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-12301",
    "datePublished": "2026-06-16T11:52:34.878Z",
    "dateReserved": "2026-06-15T15:08:11.001Z",
    "dateUpdated": "2026-06-18T18:00:47.853Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12303 (GCVE-0-2026-12303)

Vulnerability from cvelistv5 – Published: 2026-06-16 11:52 – Updated: 2026-06-16 16:08

Title

Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component

Summary

Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-16 14:31 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

mozilla mitre root

References

3 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=2034608
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 152 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 152 , ≤ * (rpm)

Credits

Michal Andryskowski

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12303",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-16T14:31:06.824125Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-16T14:31:25.986Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "152",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "152",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Michal Andryskowski"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152."
            }
          ],
          "value": "Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-16T16:08:31.424Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2034608"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-57/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-60/"
        }
      ],
      "title": "Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-12303",
    "datePublished": "2026-06-16T11:52:36.848Z",
    "dateReserved": "2026-06-15T15:08:11.833Z",
    "dateUpdated": "2026-06-16T16:08:31.424Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12316 (GCVE-0-2026-12316)

Vulnerability from cvelistv5 – Published: 2026-06-16 11:52 – Updated: 2026-06-16 18:24

Title

Mitigation bypass in the DOM: Security component

Summary

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-16 18:24 UTC

CWE

CWE-693 - Protection Mechanism Failure

Assigner

mozilla mitre root

References

3 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=2045496
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 152 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 152 , ≤ * (rpm)

Credits

Frederik Braun

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12316",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-16T18:24:37.486383Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-693",
                "description": "CWE-693 Protection Mechanism Failure",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-16T18:24:42.459Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "152",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "152",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Frederik Braun"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152."
            }
          ],
          "value": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-16T16:08:39.804Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2045496"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-57/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-60/"
        }
      ],
      "title": "Mitigation bypass in the DOM: Security component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-12316",
    "datePublished": "2026-06-16T11:52:49.781Z",
    "dateReserved": "2026-06-15T15:08:17.309Z",
    "dateUpdated": "2026-06-16T18:24:42.459Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

OPENSUSE-SU-2026:11373-1

CVE-2026-0888 (GCVE-0-2026-0888)

CVE-2026-0889 (GCVE-0-2026-0889)

CVE-2026-0892 (GCVE-0-2026-0892)

CVE-2026-10701 (GCVE-0-2026-10701)

CVE-2026-10702 (GCVE-0-2026-10702)

CVE-2026-12293 (GCVE-0-2026-12293)

CVE-2026-12300 (GCVE-0-2026-12300)

CVE-2026-12301 (GCVE-0-2026-12301)

CVE-2026-12303 (GCVE-0-2026-12303)

CVE-2026-12316 (GCVE-0-2026-12316)

Tags

Sightings

Nomenclature