OPENSUSE-SU-2026:12224-1

Vulnerability from csaf_opensuse - Published: 2026-10-22 00:00 - Updated: 2026-10-27 21:04
Summary
MozillaThunderbird-153.5.1-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: MozillaThunderbird-153.5.1-1.1 on GA media
Description of the patch: These are all security issues fixed in the MozillaThunderbird-153.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-12224
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-109704
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64 —
Vendor Fix
Threats
Impact critical
CVE-2026-109705
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109706
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109707
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109708
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109709
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109710
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109711
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109712
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109713
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109715
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109716
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109717
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109718
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109719
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109720
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109721
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109722
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109723
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109724
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109725
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109726
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109727
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109728
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109729
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109730
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109731
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109732
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109733
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109734
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109736
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109737
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109738
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109740
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109741
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109742
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109743
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109744
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109745
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109751
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109752
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109753
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109754
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109756
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109757
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109759
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109760
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109762
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109763
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109764
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109765
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109766
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109767
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109770
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109775
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109776
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109777
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109778
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109781
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109782
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109783
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-110249
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-113470
5.4 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact important
CVE-2026-113866
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact important
CVE-2026-113867
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact important
CVE-2026-113868
8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Affected products
Recommended 16 products, the same list as for CVE-2026-109704
Threats
Impact important
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://www.suse.com/security/cve/CVE-2026-109704/ self
https://www.suse.com/security/cve/CVE-2026-109705/ self
https://www.suse.com/security/cve/CVE-2026-109706/ self
https://www.suse.com/security/cve/CVE-2026-109707/ self
https://www.suse.com/security/cve/CVE-2026-109708/ self
https://www.suse.com/security/cve/CVE-2026-109709/ self
https://www.suse.com/security/cve/CVE-2026-109710/ self
https://www.suse.com/security/cve/CVE-2026-109711/ self
https://www.suse.com/security/cve/CVE-2026-109712/ self
https://www.suse.com/security/cve/CVE-2026-109713/ self
https://www.suse.com/security/cve/CVE-2026-109715/ self
https://www.suse.com/security/cve/CVE-2026-109716/ self
https://www.suse.com/security/cve/CVE-2026-109717/ self
https://www.suse.com/security/cve/CVE-2026-109718/ self
https://www.suse.com/security/cve/CVE-2026-109719/ self
https://www.suse.com/security/cve/CVE-2026-109720/ self
https://www.suse.com/security/cve/CVE-2026-109721/ self
https://www.suse.com/security/cve/CVE-2026-109722/ self
https://www.suse.com/security/cve/CVE-2026-109723/ self
https://www.suse.com/security/cve/CVE-2026-109724/ self
https://www.suse.com/security/cve/CVE-2026-109725/ self
https://www.suse.com/security/cve/CVE-2026-109726/ self
https://www.suse.com/security/cve/CVE-2026-109727/ self
https://www.suse.com/security/cve/CVE-2026-109728/ self
https://www.suse.com/security/cve/CVE-2026-109729/ self
https://www.suse.com/security/cve/CVE-2026-109730/ self
https://www.suse.com/security/cve/CVE-2026-109731/ self
https://www.suse.com/security/cve/CVE-2026-109732/ self
https://www.suse.com/security/cve/CVE-2026-109733/ self
https://www.suse.com/security/cve/CVE-2026-109734/ self
https://www.suse.com/security/cve/CVE-2026-109736/ self
https://www.suse.com/security/cve/CVE-2026-109737/ self
https://www.suse.com/security/cve/CVE-2026-109738/ self
https://www.suse.com/security/cve/CVE-2026-109740/ self
https://www.suse.com/security/cve/CVE-2026-109741/ self
https://www.suse.com/security/cve/CVE-2026-109742/ self
https://www.suse.com/security/cve/CVE-2026-109743/ self
https://www.suse.com/security/cve/CVE-2026-109744/ self
https://www.suse.com/security/cve/CVE-2026-109745/ self
https://www.suse.com/security/cve/CVE-2026-109751/ self
https://www.suse.com/security/cve/CVE-2026-109752/ self
https://www.suse.com/security/cve/CVE-2026-109753/ self
https://www.suse.com/security/cve/CVE-2026-109754/ self
https://www.suse.com/security/cve/CVE-2026-109756/ self
https://www.suse.com/security/cve/CVE-2026-109757/ self
https://www.suse.com/security/cve/CVE-2026-109759/ self
https://www.suse.com/security/cve/CVE-2026-109760/ self
https://www.suse.com/security/cve/CVE-2026-109762/ self
https://www.suse.com/security/cve/CVE-2026-109763/ self
https://www.suse.com/security/cve/CVE-2026-109764/ self
https://www.suse.com/security/cve/CVE-2026-109765/ self
https://www.suse.com/security/cve/CVE-2026-109766/ self
https://www.suse.com/security/cve/CVE-2026-109767/ self
https://www.suse.com/security/cve/CVE-2026-109770/ self
https://www.suse.com/security/cve/CVE-2026-109775/ self
https://www.suse.com/security/cve/CVE-2026-109776/ self
https://www.suse.com/security/cve/CVE-2026-109777/ self
https://www.suse.com/security/cve/CVE-2026-109778/ self
https://www.suse.com/security/cve/CVE-2026-109781/ self
https://www.suse.com/security/cve/CVE-2026-109782/ self
https://www.suse.com/security/cve/CVE-2026-109783/ self
https://www.suse.com/security/cve/CVE-2026-110249/ self
https://www.suse.com/security/cve/CVE-2026-113470/ self
https://www.suse.com/security/cve/CVE-2026-113866/ self
https://www.suse.com/security/cve/CVE-2026-113867/ self
https://www.suse.com/security/cve/CVE-2026-113868/ self
https://www.suse.com/security/cve/CVE-2026-109704 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109705 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109706 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109707 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109708 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109709 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109710 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109711 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109712 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109713 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109715 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109716 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109717 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109718 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109719 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109720 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109721 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109722 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109723 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109724 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109725 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109726 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109727 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109728 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109729 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109730 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109731 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109732 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109733 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109734 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109736 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109737 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109738 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109740 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109741 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109742 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109743 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109744 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109745 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109751 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109752 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109753 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109754 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109756 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109757 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109759 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109760 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109762 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109763 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109764 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109765 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109766 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109767 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109770 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109775 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109776 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109777 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109778 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109781 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109782 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109783 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-110249 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-113470 external
https://bugzilla.suse.com/1286385 external
https://www.suse.com/security/cve/CVE-2026-113866 external
https://bugzilla.suse.com/1286385 external
https://www.suse.com/security/cve/CVE-2026-113867 external
https://bugzilla.suse.com/1286385 external
https://www.suse.com/security/cve/CVE-2026-113868 external
https://bugzilla.suse.com/1286385 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "MozillaThunderbird-153.5.1-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the MozillaThunderbird-153.5.1-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-12224",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12224-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109704 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109704/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109705 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109705/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109706 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109706/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109707 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109707/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109708 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109708/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109709 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109709/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109710 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109710/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109711 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109711/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109712 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109712/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109713 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109713/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109715 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109715/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109716 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109716/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109717 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109717/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109718 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109718/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109719 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109719/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109720 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109720/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109721 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109721/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109722 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109722/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109723 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109723/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109724 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109724/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109725 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109725/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109726 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109726/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109727 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109727/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109728 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109728/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109729 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109729/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109730 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109730/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109731 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109731/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109732 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109732/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109733 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109733/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109734 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109734/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109736 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109736/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109737 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109737/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109738 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109738/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109740 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109740/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109741 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109741/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109742 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109742/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109743 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109743/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109744 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109744/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109745 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109745/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109751 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109751/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109752 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109752/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109753 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109753/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109754 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109754/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109756 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109756/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109757 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109757/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109759 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109759/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109760 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109760/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109762 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109762/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109763 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109763/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109764 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109764/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109765 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109765/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109766 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109766/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109767 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109767/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109770 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109770/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109775 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109775/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109776 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109776/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109777 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109777/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109778 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109778/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109781 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109781/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109782 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109782/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109783 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109783/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-110249 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-110249/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-113470 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-113470/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-113866 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-113866/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-113867 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-113867/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-113868 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-113868/"
      }
    ],
    "title": "MozillaThunderbird-153.5.1-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-10-27T21:04:51Z",
      "generator": {
        "date": "2026-10-22T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:12224-1",
      "initial_release_date": "2026-10-22T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-10-22T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-10-23T09:44:43Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-10-27T21:04:51Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-0:153.5.1-1.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-0:153.5.1-1.1.aarch64",
                  "product_id": "MozillaThunderbird-0:153.5.1-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:thunderbird:153.5.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaThunderbird@153.5.1-1.1?arch=aarch64\u0026upstream=MozillaThunderbird-0:153.5.1-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
                  "product_id": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/MozillaThunderbird-openpgp-librnp@153.5.1-1.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:thunderbird:153.5.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaThunderbird-translations-common@153.5.1-1.1?arch=aarch64\u0026upstream=MozillaThunderbird-0:153.5.1-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:thunderbird:153.5.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaThunderbird-translations-other@153.5.1-1.1?arch=aarch64\u0026upstream=MozillaThunderbird-0:153.5.1-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-0:153.5.1-1.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-0:153.5.1-1.1.ppc64le",
                  "product_id": "MozillaThunderbird-0:153.5.1-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:thunderbird:153.5.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaThunderbird@153.5.1-1.1?arch=ppc64le\u0026upstream=MozillaThunderbird-0:153.5.1-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
                  "product_id": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/MozillaThunderbird-openpgp-librnp@153.5.1-1.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:thunderbird:153.5.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaThunderbird-translations-common@153.5.1-1.1?arch=ppc64le\u0026upstream=MozillaThunderbird-0:153.5.1-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:thunderbird:153.5.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaThunderbird-translations-other@153.5.1-1.1?arch=ppc64le\u0026upstream=MozillaThunderbird-0:153.5.1-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-0:153.5.1-1.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-0:153.5.1-1.1.s390x",
                  "product_id": "MozillaThunderbird-0:153.5.1-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:thunderbird:153.5.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaThunderbird@153.5.1-1.1?arch=s390x\u0026upstream=MozillaThunderbird-0:153.5.1-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
                  "product_id": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/MozillaThunderbird-openpgp-librnp@153.5.1-1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
                  "product_id": "MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:thunderbird:153.5.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaThunderbird-translations-common@153.5.1-1.1?arch=s390x\u0026upstream=MozillaThunderbird-0:153.5.1-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
                  "product_id": "MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:thunderbird:153.5.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaThunderbird-translations-other@153.5.1-1.1?arch=s390x\u0026upstream=MozillaThunderbird-0:153.5.1-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-0:153.5.1-1.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-0:153.5.1-1.1.x86_64",
                  "product_id": "MozillaThunderbird-0:153.5.1-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:thunderbird:153.5.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaThunderbird@153.5.1-1.1?arch=x86_64\u0026upstream=MozillaThunderbird-0:153.5.1-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
                  "product_id": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/MozillaThunderbird-openpgp-librnp@153.5.1-1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:thunderbird:153.5.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaThunderbird-translations-common@153.5.1-1.1?arch=x86_64\u0026upstream=MozillaThunderbird-0:153.5.1-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:thunderbird:153.5.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaThunderbird-translations-other@153.5.1-1.1?arch=x86_64\u0026upstream=MozillaThunderbird-0:153.5.1-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-0:153.5.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-0:153.5.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-0:153.5.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-0:153.5.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-0:153.5.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x"
        },
        "product_reference": "MozillaThunderbird-0:153.5.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-0:153.5.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-0:153.5.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x"
        },
        "product_reference": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-109704",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109704"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109704",
          "url": "https://www.suse.com/security/cve/CVE-2026-109704"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109704",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109704"
    },
    {
      "cve": "CVE-2026-109705",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109705"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109705",
          "url": "https://www.suse.com/security/cve/CVE-2026-109705"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109705",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109705"
    },
    {
      "cve": "CVE-2026-109706",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109706"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109706",
          "url": "https://www.suse.com/security/cve/CVE-2026-109706"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109706",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109706"
    },
    {
      "cve": "CVE-2026-109707",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109707"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109707",
          "url": "https://www.suse.com/security/cve/CVE-2026-109707"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109707",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109707"
    },
    {
      "cve": "CVE-2026-109708",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109708"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109708",
          "url": "https://www.suse.com/security/cve/CVE-2026-109708"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109708",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109708"
    },
    {
      "cve": "CVE-2026-109709",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109709"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109709",
          "url": "https://www.suse.com/security/cve/CVE-2026-109709"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109709",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109709"
    },
    {
      "cve": "CVE-2026-109710",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109710"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109710",
          "url": "https://www.suse.com/security/cve/CVE-2026-109710"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109710",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109710"
    },
    {
      "cve": "CVE-2026-109711",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109711"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109711",
          "url": "https://www.suse.com/security/cve/CVE-2026-109711"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109711",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109711"
    },
    {
      "cve": "CVE-2026-109712",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109712"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109712",
          "url": "https://www.suse.com/security/cve/CVE-2026-109712"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109712",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109712"
    },
    {
      "cve": "CVE-2026-109713",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109713"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109713",
          "url": "https://www.suse.com/security/cve/CVE-2026-109713"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109713",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109713"
    },
    {
      "cve": "CVE-2026-109715",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109715"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109715",
          "url": "https://www.suse.com/security/cve/CVE-2026-109715"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109715",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109715"
    },
    {
      "cve": "CVE-2026-109716",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109716"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109716",
          "url": "https://www.suse.com/security/cve/CVE-2026-109716"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109716",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109716"
    },
    {
      "cve": "CVE-2026-109717",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109717"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109717",
          "url": "https://www.suse.com/security/cve/CVE-2026-109717"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109717",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109717"
    },
    {
      "cve": "CVE-2026-109718",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109718"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109718",
          "url": "https://www.suse.com/security/cve/CVE-2026-109718"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109718",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109718"
    },
    {
      "cve": "CVE-2026-109719",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109719"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109719",
          "url": "https://www.suse.com/security/cve/CVE-2026-109719"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109719",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109719"
    },
    {
      "cve": "CVE-2026-109720",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109720"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109720",
          "url": "https://www.suse.com/security/cve/CVE-2026-109720"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109720",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109720"
    },
    {
      "cve": "CVE-2026-109721",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109721"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109721",
          "url": "https://www.suse.com/security/cve/CVE-2026-109721"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109721",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109721"
    },
    {
      "cve": "CVE-2026-109722",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109722"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109722",
          "url": "https://www.suse.com/security/cve/CVE-2026-109722"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109722",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109722"
    },
    {
      "cve": "CVE-2026-109723",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109723"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109723",
          "url": "https://www.suse.com/security/cve/CVE-2026-109723"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109723",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109723"
    },
    {
      "cve": "CVE-2026-109724",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109724"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109724",
          "url": "https://www.suse.com/security/cve/CVE-2026-109724"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109724",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109724"
    },
    {
      "cve": "CVE-2026-109725",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109725"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109725",
          "url": "https://www.suse.com/security/cve/CVE-2026-109725"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109725",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109725"
    },
    {
      "cve": "CVE-2026-109726",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109726"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109726",
          "url": "https://www.suse.com/security/cve/CVE-2026-109726"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109726",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109726"
    },
    {
      "cve": "CVE-2026-109727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109727",
          "url": "https://www.suse.com/security/cve/CVE-2026-109727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109727",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109727"
    },
    {
      "cve": "CVE-2026-109728",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109728"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109728",
          "url": "https://www.suse.com/security/cve/CVE-2026-109728"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109728",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109728"
    },
    {
      "cve": "CVE-2026-109729",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109729"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109729",
          "url": "https://www.suse.com/security/cve/CVE-2026-109729"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109729",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109729"
    },
    {
      "cve": "CVE-2026-109730",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109730"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109730",
          "url": "https://www.suse.com/security/cve/CVE-2026-109730"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109730",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109730"
    },
    {
      "cve": "CVE-2026-109731",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109731"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109731",
          "url": "https://www.suse.com/security/cve/CVE-2026-109731"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109731",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109731"
    },
    {
      "cve": "CVE-2026-109732",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109732"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109732",
          "url": "https://www.suse.com/security/cve/CVE-2026-109732"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109732",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109732"
    },
    {
      "cve": "CVE-2026-109733",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109733"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109733",
          "url": "https://www.suse.com/security/cve/CVE-2026-109733"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109733",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109733"
    },
    {
      "cve": "CVE-2026-109734",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109734"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109734",
          "url": "https://www.suse.com/security/cve/CVE-2026-109734"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109734",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109734"
    },
    {
      "cve": "CVE-2026-109736",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109736"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109736",
          "url": "https://www.suse.com/security/cve/CVE-2026-109736"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109736",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109736"
    },
    {
      "cve": "CVE-2026-109737",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109737"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109737",
          "url": "https://www.suse.com/security/cve/CVE-2026-109737"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109737",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109737"
    },
    {
      "cve": "CVE-2026-109738",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109738"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109738",
          "url": "https://www.suse.com/security/cve/CVE-2026-109738"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109738",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109738"
    },
    {
      "cve": "CVE-2026-109740",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109740"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109740",
          "url": "https://www.suse.com/security/cve/CVE-2026-109740"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109740",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109740"
    },
    {
      "cve": "CVE-2026-109741",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109741"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109741",
          "url": "https://www.suse.com/security/cve/CVE-2026-109741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109741",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109741"
    },
    {
      "cve": "CVE-2026-109742",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109742"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109742",
          "url": "https://www.suse.com/security/cve/CVE-2026-109742"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109742",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109742"
    },
    {
      "cve": "CVE-2026-109743",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109743"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109743",
          "url": "https://www.suse.com/security/cve/CVE-2026-109743"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109743",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109743"
    },
    {
      "cve": "CVE-2026-109744",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109744"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109744",
          "url": "https://www.suse.com/security/cve/CVE-2026-109744"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109744",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109744"
    },
    {
      "cve": "CVE-2026-109745",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109745"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109745",
          "url": "https://www.suse.com/security/cve/CVE-2026-109745"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109745",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109745"
    },
    {
      "cve": "CVE-2026-109751",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109751"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109751",
          "url": "https://www.suse.com/security/cve/CVE-2026-109751"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109751",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109751"
    },
    {
      "cve": "CVE-2026-109752",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109752"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109752",
          "url": "https://www.suse.com/security/cve/CVE-2026-109752"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109752",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109752"
    },
    {
      "cve": "CVE-2026-109753",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109753"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109753",
          "url": "https://www.suse.com/security/cve/CVE-2026-109753"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109753",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109753"
    },
    {
      "cve": "CVE-2026-109754",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109754"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109754",
          "url": "https://www.suse.com/security/cve/CVE-2026-109754"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109754",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109754"
    },
    {
      "cve": "CVE-2026-109756",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109756"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109756",
          "url": "https://www.suse.com/security/cve/CVE-2026-109756"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109756",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109756"
    },
    {
      "cve": "CVE-2026-109757",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109757"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109757",
          "url": "https://www.suse.com/security/cve/CVE-2026-109757"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109757",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109757"
    },
    {
      "cve": "CVE-2026-109759",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109759"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109759",
          "url": "https://www.suse.com/security/cve/CVE-2026-109759"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109759",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109759"
    },
    {
      "cve": "CVE-2026-109760",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109760"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109760",
          "url": "https://www.suse.com/security/cve/CVE-2026-109760"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109760",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109760"
    },
    {
      "cve": "CVE-2026-109762",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109762"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109762",
          "url": "https://www.suse.com/security/cve/CVE-2026-109762"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109762",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109762"
    },
    {
      "cve": "CVE-2026-109763",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109763"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109763",
          "url": "https://www.suse.com/security/cve/CVE-2026-109763"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109763",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109763"
    },
    {
      "cve": "CVE-2026-109764",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109764"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109764",
          "url": "https://www.suse.com/security/cve/CVE-2026-109764"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109764",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109764"
    },
    {
      "cve": "CVE-2026-109765",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109765"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109765",
          "url": "https://www.suse.com/security/cve/CVE-2026-109765"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109765",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109765"
    },
    {
      "cve": "CVE-2026-109766",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109766"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109766",
          "url": "https://www.suse.com/security/cve/CVE-2026-109766"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109766",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109766"
    },
    {
      "cve": "CVE-2026-109767",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109767"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109767",
          "url": "https://www.suse.com/security/cve/CVE-2026-109767"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109767",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109767"
    },
    {
      "cve": "CVE-2026-109770",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109770"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109770",
          "url": "https://www.suse.com/security/cve/CVE-2026-109770"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109770",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109770"
    },
    {
      "cve": "CVE-2026-109775",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109775"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109775",
          "url": "https://www.suse.com/security/cve/CVE-2026-109775"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109775",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109775"
    },
    {
      "cve": "CVE-2026-109776",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109776"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109776",
          "url": "https://www.suse.com/security/cve/CVE-2026-109776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109776",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109776"
    },
    {
      "cve": "CVE-2026-109777",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109777"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109777",
          "url": "https://www.suse.com/security/cve/CVE-2026-109777"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109777",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109777"
    },
    {
      "cve": "CVE-2026-109778",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109778"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109778",
          "url": "https://www.suse.com/security/cve/CVE-2026-109778"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109778",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109778"
    },
    {
      "cve": "CVE-2026-109781",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109781"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109781",
          "url": "https://www.suse.com/security/cve/CVE-2026-109781"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109781",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109781"
    },
    {
      "cve": "CVE-2026-109782",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109782"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109782",
          "url": "https://www.suse.com/security/cve/CVE-2026-109782"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109782",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109782"
    },
    {
      "cve": "CVE-2026-109783",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109783"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109783",
          "url": "https://www.suse.com/security/cve/CVE-2026-109783"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109783",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109783"
    },
    {
      "cve": "CVE-2026-110249",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-110249"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird\u0027s main thread CPU-bound for seconds to hours. This vulnerability was fixed in Thunderbird 158 and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-110249",
          "url": "https://www.suse.com/security/cve/CVE-2026-110249"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-110249",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-110249"
    },
    {
      "cve": "CVE-2026-113470",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-113470"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, Thunderbird 153.5.1, and Firefox 158.0.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-113470",
          "url": "https://www.suse.com/security/cve/CVE-2026-113470"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1286385 for CVE-2026-113470",
          "url": "https://bugzilla.suse.com/1286385"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-113470"
    },
    {
      "cve": "CVE-2026-113866",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-113866"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When setting up an account, Thunderbird\u0027s Exchange AutoDiscover lookup also queried the domain\u0027s AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request included the credentials the user had entered, allowing a network attacker to obtain the user\u0027s password. This vulnerability was fixed in Thunderbird 158.0.1 and Thunderbird 153.5.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-113866",
          "url": "https://www.suse.com/security/cve/CVE-2026-113866"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1286385 for CVE-2026-113866",
          "url": "https://bugzilla.suse.com/1286385"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-113866"
    },
    {
      "cve": "CVE-2026-113867",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-113867"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back in automatic replies, a remote XMPP user could send a crafted request that caused Thunderbird to inject arbitrary stanzas into the user\u0027s connection, which the server would then process as if sent by the user. This could be used to send messages or change contact and subscription settings on behalf of the user, without any interaction. This bug only affects Thunderbird\u0027s chat feature with XMPP accounts. This vulnerability was fixed in Thunderbird 158.0.1 and Thunderbird 153.5.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-113867",
          "url": "https://www.suse.com/security/cve/CVE-2026-113867"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1286385 for CVE-2026-113867",
          "url": "https://bugzilla.suse.com/1286385"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-113867"
    },
    {
      "cve": "CVE-2026-113868",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-113868"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server\u0027s challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A challenge consisting only of base64 padding also caused an out-of-bounds read, crashing Thunderbird. This affected accounts configured to use NTLM or GSSAPI authentication. The uninitialized memory disclosure only affected NTLM. This vulnerability was fixed in Thunderbird 158.0.1 and Thunderbird 153.5.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
          "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-113868",
          "url": "https://www.suse.com/security/cve/CVE-2026-113868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1286385 for CVE-2026-113868",
          "url": "https://bugzilla.suse.com/1286385"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.5.1-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.s390x",
            "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.5.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-22T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-113868"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.