OPENSUSE-SU-2026:12116-1

Vulnerability from csaf_opensuse - Published: 2026-10-13 00:00 - Updated: 2026-10-14 10:28
Summary
firefox-esr-153.5.0-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: firefox-esr-153.5.0-1.1 on GA media
Description of the patch: These are all security issues fixed in the firefox-esr-153.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-12116
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-109704
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64 —
Vendor Fix
Threats
Impact critical
CVE-2026-109705
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109706
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109707
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109708
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109709
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109710
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109711
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109712
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109713
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109715
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109716
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109717
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109718
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109719
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109720
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109721
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109722
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109723
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109724
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109725
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109726
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109727
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109728
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109729
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109730
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109731
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109732
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109733
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109734
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109736
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109737
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109738
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109740
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109741
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109742
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109743
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109744
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109745
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109751
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109752
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109753
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109754
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109756
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109757
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109759
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109760
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109762
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109763
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109764
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109765
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109766
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109767
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109770
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109775
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109776
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109777
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109778
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109781
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109782
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109783
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://www.suse.com/security/cve/CVE-2026-109704/ self
https://www.suse.com/security/cve/CVE-2026-109705/ self
https://www.suse.com/security/cve/CVE-2026-109706/ self
https://www.suse.com/security/cve/CVE-2026-109707/ self
https://www.suse.com/security/cve/CVE-2026-109708/ self
https://www.suse.com/security/cve/CVE-2026-109709/ self
https://www.suse.com/security/cve/CVE-2026-109710/ self
https://www.suse.com/security/cve/CVE-2026-109711/ self
https://www.suse.com/security/cve/CVE-2026-109712/ self
https://www.suse.com/security/cve/CVE-2026-109713/ self
https://www.suse.com/security/cve/CVE-2026-109715/ self
https://www.suse.com/security/cve/CVE-2026-109716/ self
https://www.suse.com/security/cve/CVE-2026-109717/ self
https://www.suse.com/security/cve/CVE-2026-109718/ self
https://www.suse.com/security/cve/CVE-2026-109719/ self
https://www.suse.com/security/cve/CVE-2026-109720/ self
https://www.suse.com/security/cve/CVE-2026-109721/ self
https://www.suse.com/security/cve/CVE-2026-109722/ self
https://www.suse.com/security/cve/CVE-2026-109723/ self
https://www.suse.com/security/cve/CVE-2026-109724/ self
https://www.suse.com/security/cve/CVE-2026-109725/ self
https://www.suse.com/security/cve/CVE-2026-109726/ self
https://www.suse.com/security/cve/CVE-2026-109727/ self
https://www.suse.com/security/cve/CVE-2026-109728/ self
https://www.suse.com/security/cve/CVE-2026-109729/ self
https://www.suse.com/security/cve/CVE-2026-109730/ self
https://www.suse.com/security/cve/CVE-2026-109731/ self
https://www.suse.com/security/cve/CVE-2026-109732/ self
https://www.suse.com/security/cve/CVE-2026-109733/ self
https://www.suse.com/security/cve/CVE-2026-109734/ self
https://www.suse.com/security/cve/CVE-2026-109736/ self
https://www.suse.com/security/cve/CVE-2026-109737/ self
https://www.suse.com/security/cve/CVE-2026-109738/ self
https://www.suse.com/security/cve/CVE-2026-109740/ self
https://www.suse.com/security/cve/CVE-2026-109741/ self
https://www.suse.com/security/cve/CVE-2026-109742/ self
https://www.suse.com/security/cve/CVE-2026-109743/ self
https://www.suse.com/security/cve/CVE-2026-109744/ self
https://www.suse.com/security/cve/CVE-2026-109745/ self
https://www.suse.com/security/cve/CVE-2026-109751/ self
https://www.suse.com/security/cve/CVE-2026-109752/ self
https://www.suse.com/security/cve/CVE-2026-109753/ self
https://www.suse.com/security/cve/CVE-2026-109754/ self
https://www.suse.com/security/cve/CVE-2026-109756/ self
https://www.suse.com/security/cve/CVE-2026-109757/ self
https://www.suse.com/security/cve/CVE-2026-109759/ self
https://www.suse.com/security/cve/CVE-2026-109760/ self
https://www.suse.com/security/cve/CVE-2026-109762/ self
https://www.suse.com/security/cve/CVE-2026-109763/ self
https://www.suse.com/security/cve/CVE-2026-109764/ self
https://www.suse.com/security/cve/CVE-2026-109765/ self
https://www.suse.com/security/cve/CVE-2026-109766/ self
https://www.suse.com/security/cve/CVE-2026-109767/ self
https://www.suse.com/security/cve/CVE-2026-109770/ self
https://www.suse.com/security/cve/CVE-2026-109775/ self
https://www.suse.com/security/cve/CVE-2026-109776/ self
https://www.suse.com/security/cve/CVE-2026-109777/ self
https://www.suse.com/security/cve/CVE-2026-109778/ self
https://www.suse.com/security/cve/CVE-2026-109781/ self
https://www.suse.com/security/cve/CVE-2026-109782/ self
https://www.suse.com/security/cve/CVE-2026-109783/ self
https://www.suse.com/security/cve/CVE-2026-109704 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109705 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109706 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109707 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109708 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109709 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109710 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109711 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109712 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109713 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109715 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109716 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109717 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109718 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109719 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109720 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109721 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109722 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109723 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109724 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109725 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109726 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109727 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109728 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109729 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109730 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109731 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109732 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109733 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109734 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109736 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109737 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109738 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109740 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109741 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109742 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109743 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109744 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109745 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109751 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109752 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109753 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109754 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109756 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109757 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109759 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109760 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109762 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109763 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109764 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109765 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109766 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109767 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109770 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109775 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109776 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109777 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109778 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109781 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109782 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109783 external
https://bugzilla.suse.com/1284493 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "firefox-esr-153.5.0-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the firefox-esr-153.5.0-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-12116",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12116-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109704 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109704/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109705 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109705/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109706 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109706/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109707 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109707/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109708 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109708/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109709 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109709/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109710 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109710/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109711 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109711/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109712 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109712/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109713 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109713/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109715 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109715/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109716 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109716/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109717 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109717/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109718 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109718/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109719 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109719/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109720 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109720/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109721 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109721/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109722 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109722/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109723 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109723/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109724 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109724/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109725 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109725/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109726 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109726/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109727 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109727/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109728 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109728/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109729 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109729/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109730 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109730/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109731 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109731/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109732 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109732/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109733 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109733/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109734 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109734/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109736 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109736/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109737 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109737/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109738 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109738/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109740 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109740/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109741 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109741/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109742 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109742/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109743 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109743/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109744 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109744/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109745 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109745/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109751 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109751/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109752 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109752/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109753 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109753/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109754 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109754/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109756 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109756/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109757 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109757/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109759 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109759/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109760 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109760/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109762 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109762/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109763 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109763/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109764 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109764/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109765 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109765/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109766 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109766/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109767 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109767/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109770 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109770/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109775 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109775/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109776 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109776/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109777 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109777/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109778 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109778/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109781 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109781/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109782 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109782/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109783 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109783/"
      }
    ],
    "title": "firefox-esr-153.5.0-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-10-14T10:28:21Z",
      "generator": {
        "date": "2026-10-13T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:12116-1",
      "initial_release_date": "2026-10-13T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-10-13T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-10-14T10:28:21Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-esr-0:153.5.0-1.1.aarch64",
                "product": {
                  "name": "firefox-esr-0:153.5.0-1.1.aarch64",
                  "product_id": "firefox-esr-0:153.5.0-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/firefox-esr@153.5.0-1.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
                "product": {
                  "name": "firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
                  "product_id": "firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-branding-upstream@153.5.0-1.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
                "product": {
                  "name": "firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
                  "product_id": "firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-common@153.5.0-1.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
                "product": {
                  "name": "firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
                  "product_id": "firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-other@153.5.0-1.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-esr-0:153.5.0-1.1.ppc64le",
                "product": {
                  "name": "firefox-esr-0:153.5.0-1.1.ppc64le",
                  "product_id": "firefox-esr-0:153.5.0-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/firefox-esr@153.5.0-1.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
                "product": {
                  "name": "firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
                  "product_id": "firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-branding-upstream@153.5.0-1.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
                "product": {
                  "name": "firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
                  "product_id": "firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-common@153.5.0-1.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
                "product": {
                  "name": "firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
                  "product_id": "firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-other@153.5.0-1.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-esr-0:153.5.0-1.1.s390x",
                "product": {
                  "name": "firefox-esr-0:153.5.0-1.1.s390x",
                  "product_id": "firefox-esr-0:153.5.0-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/firefox-esr@153.5.0-1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
                "product": {
                  "name": "firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
                  "product_id": "firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-branding-upstream@153.5.0-1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-common-0:153.5.0-1.1.s390x",
                "product": {
                  "name": "firefox-esr-translations-common-0:153.5.0-1.1.s390x",
                  "product_id": "firefox-esr-translations-common-0:153.5.0-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-common@153.5.0-1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-other-0:153.5.0-1.1.s390x",
                "product": {
                  "name": "firefox-esr-translations-other-0:153.5.0-1.1.s390x",
                  "product_id": "firefox-esr-translations-other-0:153.5.0-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-other@153.5.0-1.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-esr-0:153.5.0-1.1.x86_64",
                "product": {
                  "name": "firefox-esr-0:153.5.0-1.1.x86_64",
                  "product_id": "firefox-esr-0:153.5.0-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/firefox-esr@153.5.0-1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
                "product": {
                  "name": "firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
                  "product_id": "firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-branding-upstream@153.5.0-1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
                "product": {
                  "name": "firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
                  "product_id": "firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-common@153.5.0-1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-esr-translations-other-0:153.5.0-1.1.x86_64",
                "product": {
                  "name": "firefox-esr-translations-other-0:153.5.0-1.1.x86_64",
                  "product_id": "firefox-esr-translations-other-0:153.5.0-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/firefox-esr-translations-other@153.5.0-1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-0:153.5.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64"
        },
        "product_reference": "firefox-esr-0:153.5.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-0:153.5.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le"
        },
        "product_reference": "firefox-esr-0:153.5.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-0:153.5.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x"
        },
        "product_reference": "firefox-esr-0:153.5.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-0:153.5.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64"
        },
        "product_reference": "firefox-esr-0:153.5.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64"
        },
        "product_reference": "firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le"
        },
        "product_reference": "firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-branding-upstream-0:153.5.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x"
        },
        "product_reference": "firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64"
        },
        "product_reference": "firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-common-0:153.5.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64"
        },
        "product_reference": "firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-common-0:153.5.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le"
        },
        "product_reference": "firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-common-0:153.5.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x"
        },
        "product_reference": "firefox-esr-translations-common-0:153.5.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-common-0:153.5.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64"
        },
        "product_reference": "firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-other-0:153.5.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64"
        },
        "product_reference": "firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-other-0:153.5.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le"
        },
        "product_reference": "firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-other-0:153.5.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x"
        },
        "product_reference": "firefox-esr-translations-other-0:153.5.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-esr-translations-other-0:153.5.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        },
        "product_reference": "firefox-esr-translations-other-0:153.5.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-109704",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109704"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109704",
          "url": "https://www.suse.com/security/cve/CVE-2026-109704"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109704",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109704"
    },
    {
      "cve": "CVE-2026-109705",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109705"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109705",
          "url": "https://www.suse.com/security/cve/CVE-2026-109705"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109705",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109705"
    },
    {
      "cve": "CVE-2026-109706",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109706"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109706",
          "url": "https://www.suse.com/security/cve/CVE-2026-109706"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109706",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109706"
    },
    {
      "cve": "CVE-2026-109707",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109707"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109707",
          "url": "https://www.suse.com/security/cve/CVE-2026-109707"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109707",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109707"
    },
    {
      "cve": "CVE-2026-109708",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109708"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109708",
          "url": "https://www.suse.com/security/cve/CVE-2026-109708"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109708",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109708"
    },
    {
      "cve": "CVE-2026-109709",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109709"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109709",
          "url": "https://www.suse.com/security/cve/CVE-2026-109709"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109709",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109709"
    },
    {
      "cve": "CVE-2026-109710",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109710"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109710",
          "url": "https://www.suse.com/security/cve/CVE-2026-109710"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109710",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109710"
    },
    {
      "cve": "CVE-2026-109711",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109711"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109711",
          "url": "https://www.suse.com/security/cve/CVE-2026-109711"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109711",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109711"
    },
    {
      "cve": "CVE-2026-109712",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109712"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109712",
          "url": "https://www.suse.com/security/cve/CVE-2026-109712"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109712",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109712"
    },
    {
      "cve": "CVE-2026-109713",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109713"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109713",
          "url": "https://www.suse.com/security/cve/CVE-2026-109713"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109713",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109713"
    },
    {
      "cve": "CVE-2026-109715",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109715"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109715",
          "url": "https://www.suse.com/security/cve/CVE-2026-109715"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109715",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109715"
    },
    {
      "cve": "CVE-2026-109716",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109716"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109716",
          "url": "https://www.suse.com/security/cve/CVE-2026-109716"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109716",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109716"
    },
    {
      "cve": "CVE-2026-109717",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109717"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109717",
          "url": "https://www.suse.com/security/cve/CVE-2026-109717"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109717",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109717"
    },
    {
      "cve": "CVE-2026-109718",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109718"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109718",
          "url": "https://www.suse.com/security/cve/CVE-2026-109718"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109718",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109718"
    },
    {
      "cve": "CVE-2026-109719",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109719"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109719",
          "url": "https://www.suse.com/security/cve/CVE-2026-109719"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109719",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109719"
    },
    {
      "cve": "CVE-2026-109720",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109720"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109720",
          "url": "https://www.suse.com/security/cve/CVE-2026-109720"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109720",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109720"
    },
    {
      "cve": "CVE-2026-109721",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109721"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109721",
          "url": "https://www.suse.com/security/cve/CVE-2026-109721"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109721",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109721"
    },
    {
      "cve": "CVE-2026-109722",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109722"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109722",
          "url": "https://www.suse.com/security/cve/CVE-2026-109722"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109722",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109722"
    },
    {
      "cve": "CVE-2026-109723",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109723"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109723",
          "url": "https://www.suse.com/security/cve/CVE-2026-109723"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109723",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109723"
    },
    {
      "cve": "CVE-2026-109724",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109724"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109724",
          "url": "https://www.suse.com/security/cve/CVE-2026-109724"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109724",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109724"
    },
    {
      "cve": "CVE-2026-109725",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109725"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109725",
          "url": "https://www.suse.com/security/cve/CVE-2026-109725"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109725",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109725"
    },
    {
      "cve": "CVE-2026-109726",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109726"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109726",
          "url": "https://www.suse.com/security/cve/CVE-2026-109726"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109726",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109726"
    },
    {
      "cve": "CVE-2026-109727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109727",
          "url": "https://www.suse.com/security/cve/CVE-2026-109727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109727",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109727"
    },
    {
      "cve": "CVE-2026-109728",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109728"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109728",
          "url": "https://www.suse.com/security/cve/CVE-2026-109728"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109728",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109728"
    },
    {
      "cve": "CVE-2026-109729",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109729"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109729",
          "url": "https://www.suse.com/security/cve/CVE-2026-109729"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109729",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109729"
    },
    {
      "cve": "CVE-2026-109730",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109730"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109730",
          "url": "https://www.suse.com/security/cve/CVE-2026-109730"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109730",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109730"
    },
    {
      "cve": "CVE-2026-109731",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109731"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109731",
          "url": "https://www.suse.com/security/cve/CVE-2026-109731"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109731",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109731"
    },
    {
      "cve": "CVE-2026-109732",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109732"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109732",
          "url": "https://www.suse.com/security/cve/CVE-2026-109732"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109732",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109732"
    },
    {
      "cve": "CVE-2026-109733",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109733"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109733",
          "url": "https://www.suse.com/security/cve/CVE-2026-109733"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109733",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109733"
    },
    {
      "cve": "CVE-2026-109734",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109734"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109734",
          "url": "https://www.suse.com/security/cve/CVE-2026-109734"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109734",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109734"
    },
    {
      "cve": "CVE-2026-109736",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109736"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109736",
          "url": "https://www.suse.com/security/cve/CVE-2026-109736"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109736",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109736"
    },
    {
      "cve": "CVE-2026-109737",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109737"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109737",
          "url": "https://www.suse.com/security/cve/CVE-2026-109737"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109737",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109737"
    },
    {
      "cve": "CVE-2026-109738",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109738"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109738",
          "url": "https://www.suse.com/security/cve/CVE-2026-109738"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109738",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109738"
    },
    {
      "cve": "CVE-2026-109740",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109740"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109740",
          "url": "https://www.suse.com/security/cve/CVE-2026-109740"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109740",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109740"
    },
    {
      "cve": "CVE-2026-109741",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109741"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109741",
          "url": "https://www.suse.com/security/cve/CVE-2026-109741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109741",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109741"
    },
    {
      "cve": "CVE-2026-109742",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109742"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109742",
          "url": "https://www.suse.com/security/cve/CVE-2026-109742"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109742",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109742"
    },
    {
      "cve": "CVE-2026-109743",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109743"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109743",
          "url": "https://www.suse.com/security/cve/CVE-2026-109743"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109743",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109743"
    },
    {
      "cve": "CVE-2026-109744",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109744"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109744",
          "url": "https://www.suse.com/security/cve/CVE-2026-109744"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109744",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109744"
    },
    {
      "cve": "CVE-2026-109745",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109745"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109745",
          "url": "https://www.suse.com/security/cve/CVE-2026-109745"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109745",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109745"
    },
    {
      "cve": "CVE-2026-109751",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109751"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109751",
          "url": "https://www.suse.com/security/cve/CVE-2026-109751"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109751",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109751"
    },
    {
      "cve": "CVE-2026-109752",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109752"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109752",
          "url": "https://www.suse.com/security/cve/CVE-2026-109752"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109752",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109752"
    },
    {
      "cve": "CVE-2026-109753",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109753"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109753",
          "url": "https://www.suse.com/security/cve/CVE-2026-109753"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109753",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109753"
    },
    {
      "cve": "CVE-2026-109754",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109754"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109754",
          "url": "https://www.suse.com/security/cve/CVE-2026-109754"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109754",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109754"
    },
    {
      "cve": "CVE-2026-109756",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109756"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109756",
          "url": "https://www.suse.com/security/cve/CVE-2026-109756"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109756",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109756"
    },
    {
      "cve": "CVE-2026-109757",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109757"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109757",
          "url": "https://www.suse.com/security/cve/CVE-2026-109757"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109757",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109757"
    },
    {
      "cve": "CVE-2026-109759",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109759"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109759",
          "url": "https://www.suse.com/security/cve/CVE-2026-109759"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109759",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109759"
    },
    {
      "cve": "CVE-2026-109760",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109760"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109760",
          "url": "https://www.suse.com/security/cve/CVE-2026-109760"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109760",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109760"
    },
    {
      "cve": "CVE-2026-109762",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109762"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109762",
          "url": "https://www.suse.com/security/cve/CVE-2026-109762"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109762",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109762"
    },
    {
      "cve": "CVE-2026-109763",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109763"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109763",
          "url": "https://www.suse.com/security/cve/CVE-2026-109763"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109763",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109763"
    },
    {
      "cve": "CVE-2026-109764",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109764"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109764",
          "url": "https://www.suse.com/security/cve/CVE-2026-109764"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109764",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109764"
    },
    {
      "cve": "CVE-2026-109765",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109765"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109765",
          "url": "https://www.suse.com/security/cve/CVE-2026-109765"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109765",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109765"
    },
    {
      "cve": "CVE-2026-109766",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109766"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109766",
          "url": "https://www.suse.com/security/cve/CVE-2026-109766"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109766",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109766"
    },
    {
      "cve": "CVE-2026-109767",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109767"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109767",
          "url": "https://www.suse.com/security/cve/CVE-2026-109767"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109767",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109767"
    },
    {
      "cve": "CVE-2026-109770",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109770"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109770",
          "url": "https://www.suse.com/security/cve/CVE-2026-109770"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109770",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109770"
    },
    {
      "cve": "CVE-2026-109775",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109775"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109775",
          "url": "https://www.suse.com/security/cve/CVE-2026-109775"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109775",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109775"
    },
    {
      "cve": "CVE-2026-109776",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109776"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109776",
          "url": "https://www.suse.com/security/cve/CVE-2026-109776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109776",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109776"
    },
    {
      "cve": "CVE-2026-109777",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109777"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109777",
          "url": "https://www.suse.com/security/cve/CVE-2026-109777"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109777",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109777"
    },
    {
      "cve": "CVE-2026-109778",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109778"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109778",
          "url": "https://www.suse.com/security/cve/CVE-2026-109778"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109778",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109778"
    },
    {
      "cve": "CVE-2026-109781",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109781"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109781",
          "url": "https://www.suse.com/security/cve/CVE-2026-109781"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109781",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109781"
    },
    {
      "cve": "CVE-2026-109782",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109782"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109782",
          "url": "https://www.suse.com/security/cve/CVE-2026-109782"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109782",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109782"
    },
    {
      "cve": "CVE-2026-109783",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109783"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
          "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109783",
          "url": "https://www.suse.com/security/cve/CVE-2026-109783"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109783",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-common-0:153.5.0-1.1.x86_64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.aarch64",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.ppc64le",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.s390x",
            "openSUSE Tumbleweed:firefox-esr-translations-other-0:153.5.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-13T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109783"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.