OPENSUSE-SU-2026:11917-1

Vulnerability from csaf_opensuse - Published: 2026-09-29 00:00 - Updated: 2026-10-27 21:04
Summary
firefox-esr-153.4.0-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: firefox-esr-153.4.0-1.1 on GA media
Description of the patch: These are all security issues fixed in the firefox-esr-153.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11917
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-100756
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64 —
Vendor Fix
Threats
Impact critical
CVE-2026-100757
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100758
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100759
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100760
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100762
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100765
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100766
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100767
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100769
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100770
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100771
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100772
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100773
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100774
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100775
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100776
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100777
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100778
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100779
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100780
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100781
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100782
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100783
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100784
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100785
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100786
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100787
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100788
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100789
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100790
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100791
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100792
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100794
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100797
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100798
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100800
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100801
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100803
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100806
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100807
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100808
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100809
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100811
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100812
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100814
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100815
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100816
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100818
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100819
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100820
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100821
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100822
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100824
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100825
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100826
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100828
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100829
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100830
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100831
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-100832
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
CVE-2026-96869
Affected products
Recommended 16 products, the same list as for CVE-2026-100756
Threats
Impact critical
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://www.suse.com/security/cve/CVE-2026-100756/ self
https://www.suse.com/security/cve/CVE-2026-100757/ self
https://www.suse.com/security/cve/CVE-2026-100758/ self
https://www.suse.com/security/cve/CVE-2026-100759/ self
https://www.suse.com/security/cve/CVE-2026-100760/ self
https://www.suse.com/security/cve/CVE-2026-100762/ self
https://www.suse.com/security/cve/CVE-2026-100765/ self
https://www.suse.com/security/cve/CVE-2026-100766/ self
https://www.suse.com/security/cve/CVE-2026-100767/ self
https://www.suse.com/security/cve/CVE-2026-100769/ self
https://www.suse.com/security/cve/CVE-2026-100770/ self
https://www.suse.com/security/cve/CVE-2026-100771/ self
https://www.suse.com/security/cve/CVE-2026-100772/ self
https://www.suse.com/security/cve/CVE-2026-100773/ self
https://www.suse.com/security/cve/CVE-2026-100774/ self
https://www.suse.com/security/cve/CVE-2026-100775/ self
https://www.suse.com/security/cve/CVE-2026-100776/ self
https://www.suse.com/security/cve/CVE-2026-100777/ self
https://www.suse.com/security/cve/CVE-2026-100778/ self
https://www.suse.com/security/cve/CVE-2026-100779/ self
https://www.suse.com/security/cve/CVE-2026-100780/ self
https://www.suse.com/security/cve/CVE-2026-100781/ self
https://www.suse.com/security/cve/CVE-2026-100782/ self
https://www.suse.com/security/cve/CVE-2026-100783/ self
https://www.suse.com/security/cve/CVE-2026-100784/ self
https://www.suse.com/security/cve/CVE-2026-100785/ self
https://www.suse.com/security/cve/CVE-2026-100786/ self
https://www.suse.com/security/cve/CVE-2026-100787/ self
https://www.suse.com/security/cve/CVE-2026-100788/ self
https://www.suse.com/security/cve/CVE-2026-100789/ self
https://www.suse.com/security/cve/CVE-2026-100790/ self
https://www.suse.com/security/cve/CVE-2026-100791/ self
https://www.suse.com/security/cve/CVE-2026-100792/ self
https://www.suse.com/security/cve/CVE-2026-100794/ self
https://www.suse.com/security/cve/CVE-2026-100797/ self
https://www.suse.com/security/cve/CVE-2026-100798/ self
https://www.suse.com/security/cve/CVE-2026-100800/ self
https://www.suse.com/security/cve/CVE-2026-100801/ self
https://www.suse.com/security/cve/CVE-2026-100803/ self
https://www.suse.com/security/cve/CVE-2026-100806/ self
https://www.suse.com/security/cve/CVE-2026-100807/ self
https://www.suse.com/security/cve/CVE-2026-100808/ self
https://www.suse.com/security/cve/CVE-2026-100809/ self
https://www.suse.com/security/cve/CVE-2026-100811/ self
https://www.suse.com/security/cve/CVE-2026-100812/ self
https://www.suse.com/security/cve/CVE-2026-100814/ self
https://www.suse.com/security/cve/CVE-2026-100815/ self
https://www.suse.com/security/cve/CVE-2026-100816/ self
https://www.suse.com/security/cve/CVE-2026-100818/ self
https://www.suse.com/security/cve/CVE-2026-100819/ self
https://www.suse.com/security/cve/CVE-2026-100820/ self
https://www.suse.com/security/cve/CVE-2026-100821/ self
https://www.suse.com/security/cve/CVE-2026-100822/ self
https://www.suse.com/security/cve/CVE-2026-100824/ self
https://www.suse.com/security/cve/CVE-2026-100825/ self
https://www.suse.com/security/cve/CVE-2026-100826/ self
https://www.suse.com/security/cve/CVE-2026-100828/ self
https://www.suse.com/security/cve/CVE-2026-100829/ self
https://www.suse.com/security/cve/CVE-2026-100830/ self
https://www.suse.com/security/cve/CVE-2026-100831/ self
https://www.suse.com/security/cve/CVE-2026-100832/ self
https://www.suse.com/security/cve/CVE-2026-96869/ self
https://www.suse.com/security/cve/CVE-2026-100756 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100757 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100758 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100759 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100760 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100762 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100765 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100766 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100767 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100769 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100770 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100771 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100772 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100773 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100774 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100775 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100776 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100777 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100778 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100779 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100780 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100781 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100782 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100783 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100784 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100785 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100786 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100787 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100788 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100789 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100790 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100791 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100792 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100794 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100797 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100798 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100800 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100801 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100803 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100806 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100807 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100808 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100809 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100811 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100812 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100814 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100815 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100816 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100818 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100819 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100820 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100821 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100822 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100824 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100825 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100826 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100828 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100829 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100830 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100831 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-100832 external
https://bugzilla.suse.com/1282929 external
https://www.suse.com/security/cve/CVE-2026-96869 external
https://bugzilla.suse.com/1282929 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "firefox-esr-153.4.0-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the firefox-esr-153.4.0-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-11917",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11917-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100756 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100756/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100757 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100757/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100758 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100758/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100759 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100759/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100760 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100760/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100762 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100762/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100765 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100765/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100766 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100766/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100767 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100767/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100769 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100769/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100770 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100770/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100771 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100771/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100772 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100772/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100773 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100773/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100774 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100774/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100775 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100775/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100776 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100776/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100777 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100777/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100778 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100778/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100779 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100779/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100780 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100780/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100781 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100781/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100782 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100782/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100783 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100783/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100784 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100784/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100785 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100785/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100786 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100786/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100787 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100787/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100788 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100788/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100789 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100789/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100790 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100790/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100791 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100791/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100792 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100792/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100794 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100794/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100797 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100797/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100798 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100798/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100800 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100800/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100801 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100801/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100803 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100803/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100806 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100806/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100807 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100807/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100808 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100808/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100809 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100809/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100811 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100811/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100812 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100812/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100814 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100814/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100815 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100815/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100816 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100816/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100818 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100818/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100819 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100819/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100820 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100820/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100821 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100821/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100822 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100822/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100824 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100824/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100825 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100825/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100826 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100826/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100828 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100828/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100829 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100829/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100830 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100830/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100831 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100831/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-100832 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-100832/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-96869 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-96869/"
      }
    ],
    "title": "firefox-esr-153.4.0-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-10-27T21:04:31Z",
      "generator": {
        "date": "2026-09-29T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:11917-1",
      "initial_release_date": "2026-09-29T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-09-29T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-30T11:18:44Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-10-01T10:22:56Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-10-02T10:46:38Z",
          "number": "4",
          "summary": "unknown changes"
        },
        {
          "date": "2026-10-27T21:04:31Z",
          "number": "5",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "5"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-esr-0:153.4.0-1.1.aarch64",
                "product": {
                  "name": "firefox-esr-0:153.4.0-1.1.aarch64",
                  "product_id": "firefox-esr-0:153.4.0-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/firefox-esr@153.4.0-1.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
                "product": {
                  "name": "firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
                  "product_id": "firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-branding-upstream@153.4.0-1.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
                "product": {
                  "name": "firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
                  "product_id": "firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-common@153.4.0-1.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
                "product": {
                  "name": "firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
                  "product_id": "firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-other@153.4.0-1.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-esr-0:153.4.0-1.1.ppc64le",
                "product": {
                  "name": "firefox-esr-0:153.4.0-1.1.ppc64le",
                  "product_id": "firefox-esr-0:153.4.0-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/firefox-esr@153.4.0-1.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
                "product": {
                  "name": "firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
                  "product_id": "firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-branding-upstream@153.4.0-1.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
                "product": {
                  "name": "firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
                  "product_id": "firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-common@153.4.0-1.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
                "product": {
                  "name": "firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
                  "product_id": "firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-other@153.4.0-1.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-esr-0:153.4.0-1.1.s390x",
                "product": {
                  "name": "firefox-esr-0:153.4.0-1.1.s390x",
                  "product_id": "firefox-esr-0:153.4.0-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/firefox-esr@153.4.0-1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
                "product": {
                  "name": "firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
                  "product_id": "firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-branding-upstream@153.4.0-1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-common-0:153.4.0-1.1.s390x",
                "product": {
                  "name": "firefox-esr-translations-common-0:153.4.0-1.1.s390x",
                  "product_id": "firefox-esr-translations-common-0:153.4.0-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-common@153.4.0-1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-other-0:153.4.0-1.1.s390x",
                "product": {
                  "name": "firefox-esr-translations-other-0:153.4.0-1.1.s390x",
                  "product_id": "firefox-esr-translations-other-0:153.4.0-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-other@153.4.0-1.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-esr-0:153.4.0-1.1.x86_64",
                "product": {
                  "name": "firefox-esr-0:153.4.0-1.1.x86_64",
                  "product_id": "firefox-esr-0:153.4.0-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/firefox-esr@153.4.0-1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
                "product": {
                  "name": "firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
                  "product_id": "firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-branding-upstream@153.4.0-1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
                "product": {
                  "name": "firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
                  "product_id": "firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-common@153.4.0-1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-other-0:153.4.0-1.1.x86_64",
                "product": {
                  "name": "firefox-esr-translations-other-0:153.4.0-1.1.x86_64",
                  "product_id": "firefox-esr-translations-other-0:153.4.0-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-other@153.4.0-1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-0:153.4.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64"
        },
        "product_reference": "firefox-esr-0:153.4.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-0:153.4.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le"
        },
        "product_reference": "firefox-esr-0:153.4.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-0:153.4.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x"
        },
        "product_reference": "firefox-esr-0:153.4.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-0:153.4.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64"
        },
        "product_reference": "firefox-esr-0:153.4.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64"
        },
        "product_reference": "firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le"
        },
        "product_reference": "firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-branding-upstream-0:153.4.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x"
        },
        "product_reference": "firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64"
        },
        "product_reference": "firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-common-0:153.4.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64"
        },
        "product_reference": "firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-common-0:153.4.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le"
        },
        "product_reference": "firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-common-0:153.4.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x"
        },
        "product_reference": "firefox-esr-translations-common-0:153.4.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-common-0:153.4.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64"
        },
        "product_reference": "firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-other-0:153.4.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64"
        },
        "product_reference": "firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-other-0:153.4.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le"
        },
        "product_reference": "firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-other-0:153.4.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x"
        },
        "product_reference": "firefox-esr-translations-other-0:153.4.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-other-0:153.4.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        },
        "product_reference": "firefox-esr-translations-other-0:153.4.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-100756",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100756"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100756",
          "url": "https://www.suse.com/security/cve/CVE-2026-100756"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100756",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100756"
    },
    {
      "cve": "CVE-2026-100757",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100757"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100757",
          "url": "https://www.suse.com/security/cve/CVE-2026-100757"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100757",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100757"
    },
    {
      "cve": "CVE-2026-100758",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100758"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100758",
          "url": "https://www.suse.com/security/cve/CVE-2026-100758"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100758",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100758"
    },
    {
      "cve": "CVE-2026-100759",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100759"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100759",
          "url": "https://www.suse.com/security/cve/CVE-2026-100759"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100759",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100759"
    },
    {
      "cve": "CVE-2026-100760",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100760"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100760",
          "url": "https://www.suse.com/security/cve/CVE-2026-100760"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100760",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100760"
    },
    {
      "cve": "CVE-2026-100762",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100762"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100762",
          "url": "https://www.suse.com/security/cve/CVE-2026-100762"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100762",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100762"
    },
    {
      "cve": "CVE-2026-100765",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100765"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100765",
          "url": "https://www.suse.com/security/cve/CVE-2026-100765"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100765",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100765"
    },
    {
      "cve": "CVE-2026-100766",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100766"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100766",
          "url": "https://www.suse.com/security/cve/CVE-2026-100766"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100766",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100766"
    },
    {
      "cve": "CVE-2026-100767",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100767"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100767",
          "url": "https://www.suse.com/security/cve/CVE-2026-100767"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100767",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100767"
    },
    {
      "cve": "CVE-2026-100769",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100769"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100769",
          "url": "https://www.suse.com/security/cve/CVE-2026-100769"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100769",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100769"
    },
    {
      "cve": "CVE-2026-100770",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100770"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100770",
          "url": "https://www.suse.com/security/cve/CVE-2026-100770"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100770",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100770"
    },
    {
      "cve": "CVE-2026-100771",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100771"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100771",
          "url": "https://www.suse.com/security/cve/CVE-2026-100771"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100771",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100771"
    },
    {
      "cve": "CVE-2026-100772",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100772"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100772",
          "url": "https://www.suse.com/security/cve/CVE-2026-100772"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100772",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100772"
    },
    {
      "cve": "CVE-2026-100773",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100773"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100773",
          "url": "https://www.suse.com/security/cve/CVE-2026-100773"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100773",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100773"
    },
    {
      "cve": "CVE-2026-100774",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100774"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100774",
          "url": "https://www.suse.com/security/cve/CVE-2026-100774"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100774",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100774"
    },
    {
      "cve": "CVE-2026-100775",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100775"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100775",
          "url": "https://www.suse.com/security/cve/CVE-2026-100775"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100775",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100775"
    },
    {
      "cve": "CVE-2026-100776",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100776"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100776",
          "url": "https://www.suse.com/security/cve/CVE-2026-100776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100776",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100776"
    },
    {
      "cve": "CVE-2026-100777",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100777"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100777",
          "url": "https://www.suse.com/security/cve/CVE-2026-100777"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100777",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100777"
    },
    {
      "cve": "CVE-2026-100778",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100778"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100778",
          "url": "https://www.suse.com/security/cve/CVE-2026-100778"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100778",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100778"
    },
    {
      "cve": "CVE-2026-100779",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100779"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100779",
          "url": "https://www.suse.com/security/cve/CVE-2026-100779"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100779",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100779"
    },
    {
      "cve": "CVE-2026-100780",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100780"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100780",
          "url": "https://www.suse.com/security/cve/CVE-2026-100780"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100780",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100780"
    },
    {
      "cve": "CVE-2026-100781",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100781"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100781",
          "url": "https://www.suse.com/security/cve/CVE-2026-100781"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100781",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100781"
    },
    {
      "cve": "CVE-2026-100782",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100782"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100782",
          "url": "https://www.suse.com/security/cve/CVE-2026-100782"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100782",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100782"
    },
    {
      "cve": "CVE-2026-100783",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100783"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100783",
          "url": "https://www.suse.com/security/cve/CVE-2026-100783"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100783",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100783"
    },
    {
      "cve": "CVE-2026-100784",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100784"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100784",
          "url": "https://www.suse.com/security/cve/CVE-2026-100784"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100784",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100784"
    },
    {
      "cve": "CVE-2026-100785",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100785"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100785",
          "url": "https://www.suse.com/security/cve/CVE-2026-100785"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100785",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100785"
    },
    {
      "cve": "CVE-2026-100786",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100786"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100786",
          "url": "https://www.suse.com/security/cve/CVE-2026-100786"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100786",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100786"
    },
    {
      "cve": "CVE-2026-100787",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100787"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100787",
          "url": "https://www.suse.com/security/cve/CVE-2026-100787"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100787",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100787"
    },
    {
      "cve": "CVE-2026-100788",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100788"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100788",
          "url": "https://www.suse.com/security/cve/CVE-2026-100788"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100788",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100788"
    },
    {
      "cve": "CVE-2026-100789",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100789"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100789",
          "url": "https://www.suse.com/security/cve/CVE-2026-100789"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100789",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100789"
    },
    {
      "cve": "CVE-2026-100790",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100790"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100790",
          "url": "https://www.suse.com/security/cve/CVE-2026-100790"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100790",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100790"
    },
    {
      "cve": "CVE-2026-100791",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100791"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100791",
          "url": "https://www.suse.com/security/cve/CVE-2026-100791"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100791",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100791"
    },
    {
      "cve": "CVE-2026-100792",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100792"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100792",
          "url": "https://www.suse.com/security/cve/CVE-2026-100792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100792",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100792"
    },
    {
      "cve": "CVE-2026-100794",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100794"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100794",
          "url": "https://www.suse.com/security/cve/CVE-2026-100794"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100794",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100794"
    },
    {
      "cve": "CVE-2026-100797",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100797"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100797",
          "url": "https://www.suse.com/security/cve/CVE-2026-100797"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100797",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100797"
    },
    {
      "cve": "CVE-2026-100798",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100798"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100798",
          "url": "https://www.suse.com/security/cve/CVE-2026-100798"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100798",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100798"
    },
    {
      "cve": "CVE-2026-100800",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100800"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100800",
          "url": "https://www.suse.com/security/cve/CVE-2026-100800"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100800",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100800"
    },
    {
      "cve": "CVE-2026-100801",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100801"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 159, Firefox ESR 153.6, Thunderbird 159, Thunderbird 153.6, Firefox 157, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100801",
          "url": "https://www.suse.com/security/cve/CVE-2026-100801"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100801",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100801"
    },
    {
      "cve": "CVE-2026-100803",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100803"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100803",
          "url": "https://www.suse.com/security/cve/CVE-2026-100803"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100803",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100803"
    },
    {
      "cve": "CVE-2026-100806",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100806"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100806",
          "url": "https://www.suse.com/security/cve/CVE-2026-100806"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100806",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100806"
    },
    {
      "cve": "CVE-2026-100807",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100807"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100807",
          "url": "https://www.suse.com/security/cve/CVE-2026-100807"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100807",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100807"
    },
    {
      "cve": "CVE-2026-100808",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100808"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100808",
          "url": "https://www.suse.com/security/cve/CVE-2026-100808"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100808",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100808"
    },
    {
      "cve": "CVE-2026-100809",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100809"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100809",
          "url": "https://www.suse.com/security/cve/CVE-2026-100809"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100809",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100809"
    },
    {
      "cve": "CVE-2026-100811",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100811"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100811",
          "url": "https://www.suse.com/security/cve/CVE-2026-100811"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100811",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100811"
    },
    {
      "cve": "CVE-2026-100812",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100812"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100812",
          "url": "https://www.suse.com/security/cve/CVE-2026-100812"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100812",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100812"
    },
    {
      "cve": "CVE-2026-100814",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100814"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100814",
          "url": "https://www.suse.com/security/cve/CVE-2026-100814"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100814",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100814"
    },
    {
      "cve": "CVE-2026-100815",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100815"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100815",
          "url": "https://www.suse.com/security/cve/CVE-2026-100815"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100815",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100815"
    },
    {
      "cve": "CVE-2026-100816",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100816"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100816",
          "url": "https://www.suse.com/security/cve/CVE-2026-100816"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100816",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100816"
    },
    {
      "cve": "CVE-2026-100818",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100818"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100818",
          "url": "https://www.suse.com/security/cve/CVE-2026-100818"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100818",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100818"
    },
    {
      "cve": "CVE-2026-100819",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100819"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100819",
          "url": "https://www.suse.com/security/cve/CVE-2026-100819"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100819",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100819"
    },
    {
      "cve": "CVE-2026-100820",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100820"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100820",
          "url": "https://www.suse.com/security/cve/CVE-2026-100820"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100820",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100820"
    },
    {
      "cve": "CVE-2026-100821",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100821"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100821",
          "url": "https://www.suse.com/security/cve/CVE-2026-100821"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100821",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100821"
    },
    {
      "cve": "CVE-2026-100822",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100822"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100822",
          "url": "https://www.suse.com/security/cve/CVE-2026-100822"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100822",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100822"
    },
    {
      "cve": "CVE-2026-100824",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100824"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100824",
          "url": "https://www.suse.com/security/cve/CVE-2026-100824"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100824",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100824"
    },
    {
      "cve": "CVE-2026-100825",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100825"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100825",
          "url": "https://www.suse.com/security/cve/CVE-2026-100825"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100825",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100825"
    },
    {
      "cve": "CVE-2026-100826",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100826"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100826",
          "url": "https://www.suse.com/security/cve/CVE-2026-100826"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100826",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100826"
    },
    {
      "cve": "CVE-2026-100828",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100828"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the Bookmarks \u0026 History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100828",
          "url": "https://www.suse.com/security/cve/CVE-2026-100828"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100828",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100828"
    },
    {
      "cve": "CVE-2026-100829",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100829"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100829",
          "url": "https://www.suse.com/security/cve/CVE-2026-100829"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100829",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100829"
    },
    {
      "cve": "CVE-2026-100830",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100830"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100830",
          "url": "https://www.suse.com/security/cve/CVE-2026-100830"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100830",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100830"
    },
    {
      "cve": "CVE-2026-100831",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100831"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: UI Events \u0026 Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100831",
          "url": "https://www.suse.com/security/cve/CVE-2026-100831"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100831",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100831"
    },
    {
      "cve": "CVE-2026-100832",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-100832"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-100832",
          "url": "https://www.suse.com/security/cve/CVE-2026-100832"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-100832",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-100832"
    },
    {
      "cve": "CVE-2026-96869",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-96869"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-96869",
          "url": "https://www.suse.com/security/cve/CVE-2026-96869"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282929 for CVE-2026-96869",
          "url": "https://bugzilla.suse.com/1282929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.4.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.4.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-29T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-96869"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.