OPENSUSE-SU-2026:22139-1

Vulnerability from csaf_opensuse - Published: 2026-10-19 14:43 - Updated: 2026-10-27 21:05
Summary
Security update for MozillaFirefox
Severity
Important
Notes
Title of the patch: Security update for MozillaFirefox
Description of the patch: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. - CVE-2026-109706: Use-after-free in the Storage: IndexedDB component. - CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component. - CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component. - CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component. - CVE-2026-109710: Use-after-free in the Graphics: Text component. - CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component. - CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component. - CVE-2026-109713: Use-after-free in the Crash Reporting component. - CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component. - CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component. - CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component. - CVE-2026-109718: Use-after-free in the XML component. - CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component. - CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component. - CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component. - CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component. - CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component. - CVE-2026-109724: Use-after-free in the DOM: Core & HTML component. - CVE-2026-109725: Use-after-free in the DOM: Core & HTML component. - CVE-2026-109726: Use-after-free in the SVG component. - CVE-2026-109727: Use-after-free in the Audio/Video component. - CVE-2026-109728: Use-after-free in the DOM: Animation component. - CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component. - CVE-2026-109730: Integer overflow in the Graphics component. - CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component. - CVE-2026-109732: Use-after-free in the DOM: Streams component. - CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component. - CVE-2026-109734: Mitigation bypass in the DOM: Security component. - CVE-2026-109736: Frame poisoning in the Layout component. - CVE-2026-109737: Mitigation bypass in the Enterprise Policies component. - CVE-2026-109738: Use-after-free in the Audio/Video: Playback component. - CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. - CVE-2026-109741: Use-after-free in the Storage: Bucket File System component. - CVE-2026-109742: Information disclosure in the PDF Viewer component. - CVE-2026-109743: Privilege escalation in the Panning and Zooming component. - CVE-2026-109744: Other issue in the DOM: File component. - CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component. - CVE-2026-109751: Information disclosure in the Networking component. - CVE-2026-109752: Use-after-free in the DOM: Workers component. - CVE-2026-109753: Incorrect boundary conditions in the Layout component. - CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component. - CVE-2026-109756: Privilege escalation in the DOM: Navigation component. - CVE-2026-109757: Sandbox escape due to race condition in the Networking component. - CVE-2026-109759: Site isolation issue in the Networking component. - CVE-2026-109760: Mitigation bypass in the Networking: HTTP component. - CVE-2026-109762: Incorrect boundary conditions in the SVG component. - CVE-2026-109763: Mitigation bypass in the File Handling component. - CVE-2026-109764: Mitigation bypass in the Enterprise Policies component. - CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component. - CVE-2026-109766: Mitigation bypass in the Enterprise Policies component. - CVE-2026-109767: Information disclosure in the Networking component. - CVE-2026-109770: Spoofing issue in the DOM: Web Serial component. - CVE-2026-109775: Denial-of-service in the WebRTC component. - CVE-2026-109776: Race condition in the XPCOM component. - CVE-2026-109777: Information disclosure in the Storage: IndexedDB component. - CVE-2026-109778: Privilege escalation in the WebExtensions component. - CVE-2026-109781: Denial-of-service in the Printing: Output component. - CVE-2026-109782: Mitigation bypass in the File Handling component. - CVE-2026-109783: Mitigation bypass in the File Handling component. libexpat updated: - CVE-2026-32776: libexpat: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value. (bsc#1259727) - CVE-2026-32777: libexpat: denial of service due to infinite loop in DTD content parsing. (bsc#1259712) - CVE-2026-32778: libexpat: NULL pointer dereference in `setContext` on retry after an out-of-memory condition. (bsc#1259730) - CVE-2026-41080: libexpat: insufficient entropy, and thus hash flooding can occur via a crafted XML document. (bsc#1262263) - CVE-2026-45186: libexpat: computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. (bsc#1264713) - CVE-2026-50219: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking in libexpat could lead to information disclosure, integrity loss, or denial of service. (bsc#1275098) - CVE-2026-56131: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking for XML_ResumeParser in libexpat could lead to denial of service. (bsc#1275098) - CVE-2026-56132: libexpat: Heap buffer overflow in doProlog due to mishandled array reallocation in libexpat could lead to denial of service or memory corruption. (bsc#1275098) - CVE-2026-56403: libexpat: Integer overflow vulnerability in the storeAtts attribute parsing function in libexpat could lead to memory corruption. (bsc#1275098) - CVE-2026-56404: libexpat: Integer overflow vulnerability in the addBinding routine of libexpat could lead to memory corruption and potential security risks. (bsc#1275098) - CVE-2026-56405: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) - CVE-2026-56406: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) - CVE-2026-56407: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) - CVE-2026-56408: libexpat: Integer overflow vulnerability in the copyString function in libexpat could lead to memory corruption. (bsc#1275098) - CVE-2026-56409: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) - CVE-2026-56410: libexpat: Integer overflow vulnerability in the xmlwf utility of libexpat could lead to denial of service. (bsc#1275098) - CVE-2026-56411: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) - CVE-2026-56412: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking in libexpat could lead to denial of service or memory corruption. (bsc#1275098) - CVE-2026-66046: libexpat: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c. (bsc#1275736) - CVE-2026-72522: libexpat: Out-of-bounds read and resultant infinite loop in the Unicode processing functions in libexpat allowed attackers to cause denial of service. (bsc#1275605) - CVE-2026-76641: libexpat: Out-of-bounds read vulnerability caused by a struct size mismatch in libexpat allowed attackers to trigger memory corruption or a crash. (bsc#1275736) - CVE-2026-76956: libexpat: Insufficient entropy caused by misinterpretation of getentropy's return code in libexpat allowed attackers to cause a denial of service via hash flooding attacks. (bsc#1275736) - CVE-2026-76957: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking with custom encoding callbacks in libexpat could lead to memory corruption. (bsc#1275736) - CVE-2026-93990: libexpat: Improper handling of lone high surrogates in UTF-16 encoded XML in libexpat allowed attackers to pass unpaired surrogates or silently replace input characters. (bsc#1282347)
Patchnames: openSUSE-Leap-16.0-1942
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-109704
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64 —
Vendor Fix
Threats
Impact critical
CVE-2026-109705
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109706
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109707
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109708
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109709
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109710
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109711
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109712
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109713
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109715
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109716
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109717
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109718
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109719
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109720
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109721
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109722
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109723
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109724
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109725
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109726
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109727
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109728
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109729
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109730
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109731
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109732
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109733
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109734
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109736
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109737
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109738
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109740
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109741
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109742
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109743
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109744
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109745
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109751
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109752
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109753
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109754
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109756
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109757
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109759
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109760
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109762
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109763
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109764
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109765
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109766
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109767
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109770
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109775
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109776
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109777
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109778
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109781
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109782
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-109783
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact critical
CVE-2026-32776
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact important
CVE-2026-32777
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact important
CVE-2026-32778
5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-41080
2.5 (Low)
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact low
CVE-2026-45186
2.9 (Low)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact low
CVE-2026-50219
4.9 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-56131
4.9 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-56132
6.9 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-56403
6.9 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-56404
6.9 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-56405
6.9 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-56406
6.9 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-56407
6.9 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-56408
6.9 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-56409
4.5 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-56410
6.3 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-56411
6.9 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-56412
4.9 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-66046
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact important
CVE-2026-72522
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact important
CVE-2026-76641
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact important
CVE-2026-76956
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact important
CVE-2026-76957
4.9 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
CVE-2026-93990
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Recommended 13 products, the same list as for CVE-2026-109704
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://bugzilla.suse.com/1259712 self
https://bugzilla.suse.com/1259727 self
https://bugzilla.suse.com/1259730 self
https://bugzilla.suse.com/1262263 self
https://bugzilla.suse.com/1264713 self
https://bugzilla.suse.com/1275098 self
https://bugzilla.suse.com/1275605 self
https://bugzilla.suse.com/1275736 self
https://bugzilla.suse.com/1282347 self
https://bugzilla.suse.com/1284493 self
https://www.suse.com/security/cve/CVE-2026-109704/ self
https://www.suse.com/security/cve/CVE-2026-109705/ self
https://www.suse.com/security/cve/CVE-2026-109706/ self
https://www.suse.com/security/cve/CVE-2026-109707/ self
https://www.suse.com/security/cve/CVE-2026-109708/ self
https://www.suse.com/security/cve/CVE-2026-109709/ self
https://www.suse.com/security/cve/CVE-2026-109710/ self
https://www.suse.com/security/cve/CVE-2026-109711/ self
https://www.suse.com/security/cve/CVE-2026-109712/ self
https://www.suse.com/security/cve/CVE-2026-109713/ self
https://www.suse.com/security/cve/CVE-2026-109715/ self
https://www.suse.com/security/cve/CVE-2026-109716/ self
https://www.suse.com/security/cve/CVE-2026-109717/ self
https://www.suse.com/security/cve/CVE-2026-109718/ self
https://www.suse.com/security/cve/CVE-2026-109719/ self
https://www.suse.com/security/cve/CVE-2026-109720/ self
https://www.suse.com/security/cve/CVE-2026-109721/ self
https://www.suse.com/security/cve/CVE-2026-109722/ self
https://www.suse.com/security/cve/CVE-2026-109723/ self
https://www.suse.com/security/cve/CVE-2026-109724/ self
https://www.suse.com/security/cve/CVE-2026-109725/ self
https://www.suse.com/security/cve/CVE-2026-109726/ self
https://www.suse.com/security/cve/CVE-2026-109727/ self
https://www.suse.com/security/cve/CVE-2026-109728/ self
https://www.suse.com/security/cve/CVE-2026-109729/ self
https://www.suse.com/security/cve/CVE-2026-109730/ self
https://www.suse.com/security/cve/CVE-2026-109731/ self
https://www.suse.com/security/cve/CVE-2026-109732/ self
https://www.suse.com/security/cve/CVE-2026-109733/ self
https://www.suse.com/security/cve/CVE-2026-109734/ self
https://www.suse.com/security/cve/CVE-2026-109736/ self
https://www.suse.com/security/cve/CVE-2026-109737/ self
https://www.suse.com/security/cve/CVE-2026-109738/ self
https://www.suse.com/security/cve/CVE-2026-109740/ self
https://www.suse.com/security/cve/CVE-2026-109741/ self
https://www.suse.com/security/cve/CVE-2026-109742/ self
https://www.suse.com/security/cve/CVE-2026-109743/ self
https://www.suse.com/security/cve/CVE-2026-109744/ self
https://www.suse.com/security/cve/CVE-2026-109745/ self
https://www.suse.com/security/cve/CVE-2026-109751/ self
https://www.suse.com/security/cve/CVE-2026-109752/ self
https://www.suse.com/security/cve/CVE-2026-109753/ self
https://www.suse.com/security/cve/CVE-2026-109754/ self
https://www.suse.com/security/cve/CVE-2026-109756/ self
https://www.suse.com/security/cve/CVE-2026-109757/ self
https://www.suse.com/security/cve/CVE-2026-109759/ self
https://www.suse.com/security/cve/CVE-2026-109760/ self
https://www.suse.com/security/cve/CVE-2026-109762/ self
https://www.suse.com/security/cve/CVE-2026-109763/ self
https://www.suse.com/security/cve/CVE-2026-109764/ self
https://www.suse.com/security/cve/CVE-2026-109765/ self
https://www.suse.com/security/cve/CVE-2026-109766/ self
https://www.suse.com/security/cve/CVE-2026-109767/ self
https://www.suse.com/security/cve/CVE-2026-109770/ self
https://www.suse.com/security/cve/CVE-2026-109775/ self
https://www.suse.com/security/cve/CVE-2026-109776/ self
https://www.suse.com/security/cve/CVE-2026-109777/ self
https://www.suse.com/security/cve/CVE-2026-109778/ self
https://www.suse.com/security/cve/CVE-2026-109781/ self
https://www.suse.com/security/cve/CVE-2026-109782/ self
https://www.suse.com/security/cve/CVE-2026-109783/ self
https://www.suse.com/security/cve/CVE-2026-32776/ self
https://www.suse.com/security/cve/CVE-2026-32777/ self
https://www.suse.com/security/cve/CVE-2026-32778/ self
https://www.suse.com/security/cve/CVE-2026-41080/ self
https://www.suse.com/security/cve/CVE-2026-45186/ self
https://www.suse.com/security/cve/CVE-2026-50219/ self
https://www.suse.com/security/cve/CVE-2026-56131/ self
https://www.suse.com/security/cve/CVE-2026-56132/ self
https://www.suse.com/security/cve/CVE-2026-56403/ self
https://www.suse.com/security/cve/CVE-2026-56404/ self
https://www.suse.com/security/cve/CVE-2026-56405/ self
https://www.suse.com/security/cve/CVE-2026-56406/ self
https://www.suse.com/security/cve/CVE-2026-56407/ self
https://www.suse.com/security/cve/CVE-2026-56408/ self
https://www.suse.com/security/cve/CVE-2026-56409/ self
https://www.suse.com/security/cve/CVE-2026-56410/ self
https://www.suse.com/security/cve/CVE-2026-56411/ self
https://www.suse.com/security/cve/CVE-2026-56412/ self
https://www.suse.com/security/cve/CVE-2026-66046/ self
https://www.suse.com/security/cve/CVE-2026-72522/ self
https://www.suse.com/security/cve/CVE-2026-76641/ self
https://www.suse.com/security/cve/CVE-2026-76956/ self
https://www.suse.com/security/cve/CVE-2026-76957/ self
https://www.suse.com/security/cve/CVE-2026-93990/ self
https://www.suse.com/security/cve/CVE-2026-109704 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109705 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109706 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109707 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109708 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109709 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109710 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109711 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109712 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109713 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109715 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109716 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109717 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109718 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109719 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109720 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109721 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109722 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109723 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109724 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109725 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109726 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109727 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109728 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109729 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109730 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109731 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109732 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109733 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109734 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109736 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109737 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109738 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109740 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109741 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109742 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109743 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109744 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109745 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109751 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109752 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109753 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109754 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109756 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109757 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109759 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109760 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109762 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109763 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109764 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109765 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109766 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109767 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109770 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109775 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109776 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109777 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109778 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109781 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109782 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-109783 external
https://bugzilla.suse.com/1284493 external
https://www.suse.com/security/cve/CVE-2026-32776 external
https://bugzilla.suse.com/1259724 external
https://www.suse.com/security/cve/CVE-2026-32777 external
https://bugzilla.suse.com/1259710 external
https://www.suse.com/security/cve/CVE-2026-32778 external
https://bugzilla.suse.com/1259725 external
https://www.suse.com/security/cve/CVE-2026-41080 external
https://bugzilla.suse.com/1262263 external
https://www.suse.com/security/cve/CVE-2026-45186 external
https://bugzilla.suse.com/1264713 external
https://www.suse.com/security/cve/CVE-2026-50219 external
https://bugzilla.suse.com/1267631 external
https://bugzilla.suse.com/1268572 external
https://bugzilla.suse.com/1275859 external
https://www.suse.com/security/cve/CVE-2026-56131 external
https://bugzilla.suse.com/1268572 external
https://bugzilla.suse.com/1275859 external
https://www.suse.com/security/cve/CVE-2026-56132 external
https://bugzilla.suse.com/1268573 external
https://www.suse.com/security/cve/CVE-2026-56403 external
https://bugzilla.suse.com/1268741 external
https://bugzilla.suse.com/1275096 external
https://www.suse.com/security/cve/CVE-2026-56404 external
https://bugzilla.suse.com/1268741 external
https://bugzilla.suse.com/1275096 external
https://www.suse.com/security/cve/CVE-2026-56405 external
https://bugzilla.suse.com/1268741 external
https://bugzilla.suse.com/1275096 external
https://www.suse.com/security/cve/CVE-2026-56406 external
https://bugzilla.suse.com/1268741 external
https://bugzilla.suse.com/1275096 external
https://www.suse.com/security/cve/CVE-2026-56407 external
https://bugzilla.suse.com/1268741 external
https://bugzilla.suse.com/1275096 external
https://www.suse.com/security/cve/CVE-2026-56408 external
https://bugzilla.suse.com/1268741 external
https://bugzilla.suse.com/1275096 external
https://www.suse.com/security/cve/CVE-2026-56409 external
https://bugzilla.suse.com/1268741 external
https://bugzilla.suse.com/1275096 external
https://www.suse.com/security/cve/CVE-2026-56410 external
https://bugzilla.suse.com/1268741 external
https://bugzilla.suse.com/1275096 external
https://www.suse.com/security/cve/CVE-2026-56411 external
https://bugzilla.suse.com/1268741 external
https://bugzilla.suse.com/1275096 external
https://www.suse.com/security/cve/CVE-2026-56412 external
https://bugzilla.suse.com/1268741 external
https://bugzilla.suse.com/1275096 external
https://bugzilla.suse.com/1275859 external
https://www.suse.com/security/cve/CVE-2026-66046 external
https://bugzilla.suse.com/1275708 external
https://bugzilla.suse.com/1275915 external
https://www.suse.com/security/cve/CVE-2026-72522 external
https://bugzilla.suse.com/1275593 external
https://www.suse.com/security/cve/CVE-2026-76641 external
https://bugzilla.suse.com/1275915 external
https://www.suse.com/security/cve/CVE-2026-76956 external
https://bugzilla.suse.com/1275860 external
https://www.suse.com/security/cve/CVE-2026-76957 external
https://bugzilla.suse.com/1275859 external
https://www.suse.com/security/cve/CVE-2026-93990 external
https://bugzilla.suse.com/1282347 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for MozillaFirefox",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for MozillaFirefox fixes the following issues:\nFirefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493):\n\n- CVE-2026-109704: Privilege escalation in the Application Update component.\n- CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the\n  Networking component.\n- CVE-2026-109706: Use-after-free in the Storage: IndexedDB component.\n- CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component.\n- CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component.\n- CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component.\n- CVE-2026-109710: Use-after-free in the Graphics: Text component.\n- CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component.\n- CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component.\n- CVE-2026-109713: Use-after-free in the Crash Reporting component.\n- CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component.\n- CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component.\n- CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component.\n- CVE-2026-109718: Use-after-free in the XML component.\n- CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component.\n- CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component.\n- CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component.\n- CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component.\n- CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component.\n- CVE-2026-109724: Use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-109725: Use-after-free in the DOM: Core \u0026 HTML component.\n- CVE-2026-109726: Use-after-free in the SVG component.\n- CVE-2026-109727: Use-after-free in the Audio/Video component.\n- CVE-2026-109728: Use-after-free in the DOM: Animation component.\n- CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component.\n- CVE-2026-109730: Integer overflow in the Graphics component.\n- CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component.\n- CVE-2026-109732: Use-after-free in the DOM: Streams component.\n- CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component.\n- CVE-2026-109734: Mitigation bypass in the DOM: Security component.\n- CVE-2026-109736: Frame poisoning in the Layout component.\n- CVE-2026-109737: Mitigation bypass in the Enterprise Policies component.\n- CVE-2026-109738: Use-after-free in the Audio/Video: Playback component.\n- CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.\n- CVE-2026-109741: Use-after-free in the Storage: Bucket File System component.\n- CVE-2026-109742: Information disclosure in the PDF Viewer component.\n- CVE-2026-109743: Privilege escalation in the Panning and Zooming component.\n- CVE-2026-109744: Other issue in the DOM: File component.\n- CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component.\n- CVE-2026-109751: Information disclosure in the Networking component.\n- CVE-2026-109752: Use-after-free in the DOM: Workers component.\n- CVE-2026-109753: Incorrect boundary conditions in the Layout component.\n- CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component.\n- CVE-2026-109756: Privilege escalation in the DOM: Navigation component.\n- CVE-2026-109757: Sandbox escape due to race condition in the Networking component.\n- CVE-2026-109759: Site isolation issue in the Networking component.\n- CVE-2026-109760: Mitigation bypass in the Networking: HTTP component.\n- CVE-2026-109762: Incorrect boundary conditions in the SVG component.\n- CVE-2026-109763: Mitigation bypass in the File Handling component.\n- CVE-2026-109764: Mitigation bypass in the Enterprise Policies component.\n- CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component.\n- CVE-2026-109766: Mitigation bypass in the Enterprise Policies component.\n- CVE-2026-109767: Information disclosure in the Networking component.\n- CVE-2026-109770: Spoofing issue in the DOM: Web Serial component.\n- CVE-2026-109775: Denial-of-service in the WebRTC component.\n- CVE-2026-109776: Race condition in the XPCOM component.\n- CVE-2026-109777: Information disclosure in the Storage: IndexedDB component.\n- CVE-2026-109778: Privilege escalation in the WebExtensions component.\n- CVE-2026-109781: Denial-of-service in the Printing: Output component.\n- CVE-2026-109782: Mitigation bypass in the File Handling component.\n- CVE-2026-109783: Mitigation bypass in the File Handling component.\n\nlibexpat updated:\n\n- CVE-2026-32776: libexpat: NULL pointer dereference when processing empty external parameter entities inside\n  an entity declaration value. (bsc#1259727)\n- CVE-2026-32777: libexpat: denial of service due to infinite loop in DTD content parsing. (bsc#1259712)\n- CVE-2026-32778: libexpat: NULL pointer dereference in `setContext` on retry after an out-of-memory condition. (bsc#1259730)\n- CVE-2026-41080: libexpat: insufficient entropy, and thus hash flooding can occur via a crafted XML document. (bsc#1262263)\n- CVE-2026-45186: libexpat: computational complexity of attribute name collision checks allows a denial of service via moderately\n  sized crafted XML input. (bsc#1264713)\n- CVE-2026-50219: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking in libexpat could lead to\n  information disclosure, integrity loss, or denial of service. (bsc#1275098)\n- CVE-2026-56131: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking for XML_ResumeParser in\n  libexpat could lead to denial of service. (bsc#1275098)\n- CVE-2026-56132: libexpat: Heap buffer overflow in doProlog due to mishandled array reallocation in libexpat could lead to\n  denial of service or memory corruption. (bsc#1275098)\n- CVE-2026-56403: libexpat: Integer overflow vulnerability in the storeAtts attribute parsing function in libexpat could lead\n  to memory corruption. (bsc#1275098)\n- CVE-2026-56404: libexpat: Integer overflow vulnerability in the addBinding routine of libexpat could lead to memory corruption\n  and potential security risks. (bsc#1275098)\n- CVE-2026-56405: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098)\n- CVE-2026-56406: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098)\n- CVE-2026-56407: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098)\n- CVE-2026-56408: libexpat: Integer overflow vulnerability in the copyString function in libexpat could lead to memory corruption. (bsc#1275098)\n- CVE-2026-56409: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098)\n- CVE-2026-56410: libexpat: Integer overflow vulnerability in the xmlwf utility of libexpat could lead to denial of service. (bsc#1275098)\n- CVE-2026-56411: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098)\n- CVE-2026-56412: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking in libexpat could lead to denial of\n  service or memory corruption. (bsc#1275098)\n- CVE-2026-66046: libexpat: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function\n  in xmlparse.c. (bsc#1275736)\n- CVE-2026-72522: libexpat: Out-of-bounds read and resultant infinite loop in the Unicode processing functions in libexpat allowed\n  attackers to cause denial of service. (bsc#1275605)\n- CVE-2026-76641: libexpat: Out-of-bounds read vulnerability caused by a struct size mismatch in libexpat allowed attackers to trigger\n  memory corruption or a crash. (bsc#1275736)\n- CVE-2026-76956: libexpat: Insufficient entropy caused by misinterpretation of getentropy\u0027s return code in libexpat allowed attackers\n  to cause a denial of service via hash flooding attacks. (bsc#1275736)\n- CVE-2026-76957: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking with custom encoding callbacks in\n  libexpat could lead to memory corruption. (bsc#1275736)\n- CVE-2026-93990: libexpat: Improper handling of lone high surrogates in UTF-16 encoded XML in libexpat allowed attackers to pass unpaired\n  surrogates or silently replace input characters. (bsc#1282347)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-1942",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22139-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259712",
        "url": "https://bugzilla.suse.com/1259712"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259727",
        "url": "https://bugzilla.suse.com/1259727"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259730",
        "url": "https://bugzilla.suse.com/1259730"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262263",
        "url": "https://bugzilla.suse.com/1262263"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264713",
        "url": "https://bugzilla.suse.com/1264713"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275098",
        "url": "https://bugzilla.suse.com/1275098"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275605",
        "url": "https://bugzilla.suse.com/1275605"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275736",
        "url": "https://bugzilla.suse.com/1275736"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1282347",
        "url": "https://bugzilla.suse.com/1282347"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1284493",
        "url": "https://bugzilla.suse.com/1284493"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109704 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109704/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109705 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109705/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109706 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109706/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109707 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109707/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109708 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109708/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109709 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109709/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109710 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109710/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109711 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109711/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109712 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109712/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109713 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109713/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109715 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109715/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109716 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109716/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109717 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109717/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109718 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109718/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109719 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109719/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109720 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109720/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109721 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109721/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109722 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109722/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109723 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109723/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109724 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109724/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109725 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109725/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109726 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109726/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109727 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109727/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109728 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109728/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109729 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109729/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109730 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109730/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109731 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109731/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109732 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109732/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109733 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109733/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109734 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109734/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109736 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109736/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109737 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109737/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109738 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109738/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109740 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109740/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109741 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109741/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109742 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109742/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109743 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109743/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109744 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109744/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109745 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109745/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109751 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109751/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109752 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109752/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109753 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109753/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109754 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109754/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109756 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109756/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109757 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109757/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109759 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109759/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109760 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109760/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109762 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109762/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109763 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109763/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109764 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109764/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109765 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109765/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109766 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109766/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109767 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109767/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109770 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109770/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109775 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109775/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109776 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109776/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109777 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109777/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109778 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109778/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109781 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109781/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109782 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109782/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-109783 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-109783/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-32776 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-32776/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-32777 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-32777/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-32778 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-32778/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-41080 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-41080/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45186 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45186/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-50219 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-50219/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56131 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56131/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56132 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56132/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56403 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56403/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56404 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56404/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56405 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56405/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56406 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56406/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56407 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56407/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56408 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56408/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56409 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56409/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56410 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56410/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56411 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56411/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56412 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56412/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-66046 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-66046/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72522 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72522/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-76641 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-76641/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-76956 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-76956/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-76957 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-76957/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-93990 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-93990/"
      }
    ],
    "title": "Security update for MozillaFirefox",
    "tracking": {
      "current_release_date": "2026-10-27T21:05:22Z",
      "generator": {
        "date": "2026-10-19T14:43:34Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:22139-1",
      "initial_release_date": "2026-10-19T14:43:34Z",
      "revision_history": [
        {
          "date": "2026-10-19T14:43:34Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-10-21T19:07:39Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-10-27T21:05:22Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
                  "product_id": "MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaFirefox@153.5.0-160000.1.1?arch=aarch64\u0026upstream=MozillaFirefox-0:153.5.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
                  "product_id": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaFirefox-branding-upstream@153.5.0-160000.1.1?arch=aarch64\u0026upstream=MozillaFirefox-0:153.5.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
                  "product_id": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaFirefox-translations-common@153.5.0-160000.1.1?arch=aarch64\u0026upstream=MozillaFirefox-0:153.5.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
                  "product_id": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaFirefox-translations-other@153.5.0-160000.1.1?arch=aarch64\u0026upstream=MozillaFirefox-0:153.5.0-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
                "product": {
                  "name": "MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
                  "product_id": "MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaFirefox-devel@153.5.0-160000.1.1?arch=noarch\u0026upstream=MozillaFirefox-0:153.5.0-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
                  "product_id": "MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaFirefox@153.5.0-160000.1.1?arch=ppc64le\u0026upstream=MozillaFirefox-0:153.5.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
                  "product_id": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaFirefox-branding-upstream@153.5.0-160000.1.1?arch=ppc64le\u0026upstream=MozillaFirefox-0:153.5.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
                  "product_id": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaFirefox-translations-common@153.5.0-160000.1.1?arch=ppc64le\u0026upstream=MozillaFirefox-0:153.5.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
                  "product_id": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaFirefox-translations-other@153.5.0-160000.1.1?arch=ppc64le\u0026upstream=MozillaFirefox-0:153.5.0-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
                  "product_id": "MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaFirefox@153.5.0-160000.1.1?arch=x86_64\u0026upstream=MozillaFirefox-0:153.5.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
                  "product_id": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaFirefox-branding-upstream@153.5.0-160000.1.1?arch=x86_64\u0026upstream=MozillaFirefox-0:153.5.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
                  "product_id": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaFirefox-translations-common@153.5.0-160000.1.1?arch=x86_64\u0026upstream=MozillaFirefox-0:153.5.0-160000.1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64",
                  "product_id": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mozilla:firefox:153.5.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/MozillaFirefox-translations-other@153.5.0-160000.1.1?arch=x86_64\u0026upstream=MozillaFirefox-0:153.5.0-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-0:153.5.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64"
        },
        "product_reference": "MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-0:153.5.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-0:153.5.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64"
        },
        "product_reference": "MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64"
        },
        "product_reference": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64"
        },
        "product_reference": "MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch"
        },
        "product_reference": "MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64"
        },
        "product_reference": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64"
        },
        "product_reference": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-109704",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109704"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109704",
          "url": "https://www.suse.com/security/cve/CVE-2026-109704"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109704",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109704"
    },
    {
      "cve": "CVE-2026-109705",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109705"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109705",
          "url": "https://www.suse.com/security/cve/CVE-2026-109705"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109705",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109705"
    },
    {
      "cve": "CVE-2026-109706",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109706"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109706",
          "url": "https://www.suse.com/security/cve/CVE-2026-109706"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109706",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109706"
    },
    {
      "cve": "CVE-2026-109707",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109707"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109707",
          "url": "https://www.suse.com/security/cve/CVE-2026-109707"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109707",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109707"
    },
    {
      "cve": "CVE-2026-109708",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109708"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109708",
          "url": "https://www.suse.com/security/cve/CVE-2026-109708"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109708",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109708"
    },
    {
      "cve": "CVE-2026-109709",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109709"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109709",
          "url": "https://www.suse.com/security/cve/CVE-2026-109709"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109709",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109709"
    },
    {
      "cve": "CVE-2026-109710",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109710"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109710",
          "url": "https://www.suse.com/security/cve/CVE-2026-109710"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109710",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109710"
    },
    {
      "cve": "CVE-2026-109711",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109711"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109711",
          "url": "https://www.suse.com/security/cve/CVE-2026-109711"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109711",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109711"
    },
    {
      "cve": "CVE-2026-109712",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109712"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109712",
          "url": "https://www.suse.com/security/cve/CVE-2026-109712"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109712",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109712"
    },
    {
      "cve": "CVE-2026-109713",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109713"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109713",
          "url": "https://www.suse.com/security/cve/CVE-2026-109713"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109713",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109713"
    },
    {
      "cve": "CVE-2026-109715",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109715"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109715",
          "url": "https://www.suse.com/security/cve/CVE-2026-109715"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109715",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109715"
    },
    {
      "cve": "CVE-2026-109716",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109716"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109716",
          "url": "https://www.suse.com/security/cve/CVE-2026-109716"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109716",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109716"
    },
    {
      "cve": "CVE-2026-109717",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109717"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109717",
          "url": "https://www.suse.com/security/cve/CVE-2026-109717"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109717",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109717"
    },
    {
      "cve": "CVE-2026-109718",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109718"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109718",
          "url": "https://www.suse.com/security/cve/CVE-2026-109718"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109718",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109718"
    },
    {
      "cve": "CVE-2026-109719",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109719"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109719",
          "url": "https://www.suse.com/security/cve/CVE-2026-109719"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109719",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109719"
    },
    {
      "cve": "CVE-2026-109720",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109720"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109720",
          "url": "https://www.suse.com/security/cve/CVE-2026-109720"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109720",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109720"
    },
    {
      "cve": "CVE-2026-109721",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109721"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109721",
          "url": "https://www.suse.com/security/cve/CVE-2026-109721"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109721",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109721"
    },
    {
      "cve": "CVE-2026-109722",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109722"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109722",
          "url": "https://www.suse.com/security/cve/CVE-2026-109722"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109722",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109722"
    },
    {
      "cve": "CVE-2026-109723",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109723"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109723",
          "url": "https://www.suse.com/security/cve/CVE-2026-109723"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109723",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109723"
    },
    {
      "cve": "CVE-2026-109724",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109724"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109724",
          "url": "https://www.suse.com/security/cve/CVE-2026-109724"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109724",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109724"
    },
    {
      "cve": "CVE-2026-109725",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109725"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109725",
          "url": "https://www.suse.com/security/cve/CVE-2026-109725"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109725",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109725"
    },
    {
      "cve": "CVE-2026-109726",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109726"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109726",
          "url": "https://www.suse.com/security/cve/CVE-2026-109726"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109726",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109726"
    },
    {
      "cve": "CVE-2026-109727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109727",
          "url": "https://www.suse.com/security/cve/CVE-2026-109727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109727",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109727"
    },
    {
      "cve": "CVE-2026-109728",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109728"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109728",
          "url": "https://www.suse.com/security/cve/CVE-2026-109728"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109728",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109728"
    },
    {
      "cve": "CVE-2026-109729",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109729"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109729",
          "url": "https://www.suse.com/security/cve/CVE-2026-109729"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109729",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109729"
    },
    {
      "cve": "CVE-2026-109730",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109730"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109730",
          "url": "https://www.suse.com/security/cve/CVE-2026-109730"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109730",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109730"
    },
    {
      "cve": "CVE-2026-109731",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109731"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109731",
          "url": "https://www.suse.com/security/cve/CVE-2026-109731"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109731",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109731"
    },
    {
      "cve": "CVE-2026-109732",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109732"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109732",
          "url": "https://www.suse.com/security/cve/CVE-2026-109732"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109732",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109732"
    },
    {
      "cve": "CVE-2026-109733",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109733"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109733",
          "url": "https://www.suse.com/security/cve/CVE-2026-109733"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109733",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109733"
    },
    {
      "cve": "CVE-2026-109734",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109734"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109734",
          "url": "https://www.suse.com/security/cve/CVE-2026-109734"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109734",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109734"
    },
    {
      "cve": "CVE-2026-109736",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109736"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109736",
          "url": "https://www.suse.com/security/cve/CVE-2026-109736"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109736",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109736"
    },
    {
      "cve": "CVE-2026-109737",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109737"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109737",
          "url": "https://www.suse.com/security/cve/CVE-2026-109737"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109737",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109737"
    },
    {
      "cve": "CVE-2026-109738",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109738"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109738",
          "url": "https://www.suse.com/security/cve/CVE-2026-109738"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109738",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109738"
    },
    {
      "cve": "CVE-2026-109740",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109740"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109740",
          "url": "https://www.suse.com/security/cve/CVE-2026-109740"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109740",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109740"
    },
    {
      "cve": "CVE-2026-109741",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109741"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109741",
          "url": "https://www.suse.com/security/cve/CVE-2026-109741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109741",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109741"
    },
    {
      "cve": "CVE-2026-109742",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109742"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109742",
          "url": "https://www.suse.com/security/cve/CVE-2026-109742"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109742",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109742"
    },
    {
      "cve": "CVE-2026-109743",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109743"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109743",
          "url": "https://www.suse.com/security/cve/CVE-2026-109743"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109743",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109743"
    },
    {
      "cve": "CVE-2026-109744",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109744"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109744",
          "url": "https://www.suse.com/security/cve/CVE-2026-109744"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109744",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109744"
    },
    {
      "cve": "CVE-2026-109745",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109745"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109745",
          "url": "https://www.suse.com/security/cve/CVE-2026-109745"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109745",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109745"
    },
    {
      "cve": "CVE-2026-109751",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109751"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109751",
          "url": "https://www.suse.com/security/cve/CVE-2026-109751"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109751",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109751"
    },
    {
      "cve": "CVE-2026-109752",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109752"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109752",
          "url": "https://www.suse.com/security/cve/CVE-2026-109752"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109752",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109752"
    },
    {
      "cve": "CVE-2026-109753",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109753"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109753",
          "url": "https://www.suse.com/security/cve/CVE-2026-109753"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109753",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109753"
    },
    {
      "cve": "CVE-2026-109754",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109754"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109754",
          "url": "https://www.suse.com/security/cve/CVE-2026-109754"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109754",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109754"
    },
    {
      "cve": "CVE-2026-109756",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109756"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109756",
          "url": "https://www.suse.com/security/cve/CVE-2026-109756"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109756",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109756"
    },
    {
      "cve": "CVE-2026-109757",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109757"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109757",
          "url": "https://www.suse.com/security/cve/CVE-2026-109757"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109757",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109757"
    },
    {
      "cve": "CVE-2026-109759",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109759"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109759",
          "url": "https://www.suse.com/security/cve/CVE-2026-109759"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109759",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109759"
    },
    {
      "cve": "CVE-2026-109760",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109760"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109760",
          "url": "https://www.suse.com/security/cve/CVE-2026-109760"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109760",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109760"
    },
    {
      "cve": "CVE-2026-109762",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109762"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109762",
          "url": "https://www.suse.com/security/cve/CVE-2026-109762"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109762",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109762"
    },
    {
      "cve": "CVE-2026-109763",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109763"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109763",
          "url": "https://www.suse.com/security/cve/CVE-2026-109763"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109763",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109763"
    },
    {
      "cve": "CVE-2026-109764",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109764"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109764",
          "url": "https://www.suse.com/security/cve/CVE-2026-109764"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109764",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109764"
    },
    {
      "cve": "CVE-2026-109765",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109765"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109765",
          "url": "https://www.suse.com/security/cve/CVE-2026-109765"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109765",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109765"
    },
    {
      "cve": "CVE-2026-109766",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109766"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109766",
          "url": "https://www.suse.com/security/cve/CVE-2026-109766"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109766",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109766"
    },
    {
      "cve": "CVE-2026-109767",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109767"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109767",
          "url": "https://www.suse.com/security/cve/CVE-2026-109767"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109767",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109767"
    },
    {
      "cve": "CVE-2026-109770",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109770"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109770",
          "url": "https://www.suse.com/security/cve/CVE-2026-109770"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109770",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109770"
    },
    {
      "cve": "CVE-2026-109775",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109775"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109775",
          "url": "https://www.suse.com/security/cve/CVE-2026-109775"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109775",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109775"
    },
    {
      "cve": "CVE-2026-109776",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109776"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109776",
          "url": "https://www.suse.com/security/cve/CVE-2026-109776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109776",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109776"
    },
    {
      "cve": "CVE-2026-109777",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109777"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109777",
          "url": "https://www.suse.com/security/cve/CVE-2026-109777"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109777",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109777"
    },
    {
      "cve": "CVE-2026-109778",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109778"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109778",
          "url": "https://www.suse.com/security/cve/CVE-2026-109778"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109778",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109778"
    },
    {
      "cve": "CVE-2026-109781",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109781"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109781",
          "url": "https://www.suse.com/security/cve/CVE-2026-109781"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109781",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109781"
    },
    {
      "cve": "CVE-2026-109782",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109782"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109782",
          "url": "https://www.suse.com/security/cve/CVE-2026-109782"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109782",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109782"
    },
    {
      "cve": "CVE-2026-109783",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-109783"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-109783",
          "url": "https://www.suse.com/security/cve/CVE-2026-109783"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1284493 for CVE-2026-109783",
          "url": "https://bugzilla.suse.com/1284493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-109783"
    },
    {
      "cve": "CVE-2026-32776",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-32776"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-32776",
          "url": "https://www.suse.com/security/cve/CVE-2026-32776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259724 for CVE-2026-32776",
          "url": "https://bugzilla.suse.com/1259724"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-32776"
    },
    {
      "cve": "CVE-2026-32777",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-32777"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.7.5 allows an infinite loop while parsing DTD content.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-32777",
          "url": "https://www.suse.com/security/cve/CVE-2026-32777"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259710 for CVE-2026-32777",
          "url": "https://bugzilla.suse.com/1259710"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-32777"
    },
    {
      "cve": "CVE-2026-32778",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-32778"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-32778",
          "url": "https://www.suse.com/security/cve/CVE-2026-32778"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259725 for CVE-2026-32778",
          "url": "https://bugzilla.suse.com/1259725"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-32778"
    },
    {
      "cve": "CVE-2026-41080",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-41080"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-41080",
          "url": "https://www.suse.com/security/cve/CVE-2026-41080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262263 for CVE-2026-41080",
          "url": "https://bugzilla.suse.com/1262263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-41080"
    },
    {
      "cve": "CVE-2026-45186",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45186"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45186",
          "url": "https://www.suse.com/security/cve/CVE-2026-45186"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264713 for CVE-2026-45186",
          "url": "https://bugzilla.suse.com/1264713"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-45186"
    },
    {
      "cve": "CVE-2026-50219",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-50219"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-50219",
          "url": "https://www.suse.com/security/cve/CVE-2026-50219"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267631 for CVE-2026-50219",
          "url": "https://bugzilla.suse.com/1267631"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268572 for CVE-2026-50219",
          "url": "https://bugzilla.suse.com/1268572"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275859 for CVE-2026-50219",
          "url": "https://bugzilla.suse.com/1275859"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-50219"
    },
    {
      "cve": "CVE-2026-56131",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56131"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56131",
          "url": "https://www.suse.com/security/cve/CVE-2026-56131"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268572 for CVE-2026-56131",
          "url": "https://bugzilla.suse.com/1268572"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275859 for CVE-2026-56131",
          "url": "https://bugzilla.suse.com/1275859"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56131"
    },
    {
      "cve": "CVE-2026-56132",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56132"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56132",
          "url": "https://www.suse.com/security/cve/CVE-2026-56132"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268573 for CVE-2026-56132",
          "url": "https://bugzilla.suse.com/1268573"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56132"
    },
    {
      "cve": "CVE-2026-56403",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56403"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.8.2 has an integer overflow in storeAtts.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56403",
          "url": "https://www.suse.com/security/cve/CVE-2026-56403"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268741 for CVE-2026-56403",
          "url": "https://bugzilla.suse.com/1268741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275096 for CVE-2026-56403",
          "url": "https://bugzilla.suse.com/1275096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56403"
    },
    {
      "cve": "CVE-2026-56404",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56404"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.8.2 has an integer overflow in addBinding.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56404",
          "url": "https://www.suse.com/security/cve/CVE-2026-56404"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268741 for CVE-2026-56404",
          "url": "https://bugzilla.suse.com/1268741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275096 for CVE-2026-56404",
          "url": "https://bugzilla.suse.com/1275096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56404"
    },
    {
      "cve": "CVE-2026-56405",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56405"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.8.2 has an integer overflow in getAttributeId.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56405",
          "url": "https://www.suse.com/security/cve/CVE-2026-56405"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268741 for CVE-2026-56405",
          "url": "https://bugzilla.suse.com/1268741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275096 for CVE-2026-56405",
          "url": "https://bugzilla.suse.com/1275096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56405"
    },
    {
      "cve": "CVE-2026-56406",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56406"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56406",
          "url": "https://www.suse.com/security/cve/CVE-2026-56406"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268741 for CVE-2026-56406",
          "url": "https://bugzilla.suse.com/1268741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275096 for CVE-2026-56406",
          "url": "https://bugzilla.suse.com/1275096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56406"
    },
    {
      "cve": "CVE-2026-56407",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56407"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56407",
          "url": "https://www.suse.com/security/cve/CVE-2026-56407"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268741 for CVE-2026-56407",
          "url": "https://bugzilla.suse.com/1268741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275096 for CVE-2026-56407",
          "url": "https://bugzilla.suse.com/1275096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56407"
    },
    {
      "cve": "CVE-2026-56408",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56408"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.8.2 has an integer overflow in copyString.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56408",
          "url": "https://www.suse.com/security/cve/CVE-2026-56408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268741 for CVE-2026-56408",
          "url": "https://bugzilla.suse.com/1268741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275096 for CVE-2026-56408",
          "url": "https://bugzilla.suse.com/1275096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56408"
    },
    {
      "cve": "CVE-2026-56409",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56409"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56409",
          "url": "https://www.suse.com/security/cve/CVE-2026-56409"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268741 for CVE-2026-56409",
          "url": "https://bugzilla.suse.com/1268741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275096 for CVE-2026-56409",
          "url": "https://bugzilla.suse.com/1275096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56409"
    },
    {
      "cve": "CVE-2026-56410",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56410"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56410",
          "url": "https://www.suse.com/security/cve/CVE-2026-56410"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268741 for CVE-2026-56410",
          "url": "https://bugzilla.suse.com/1268741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275096 for CVE-2026-56410",
          "url": "https://bugzilla.suse.com/1275096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56410"
    },
    {
      "cve": "CVE-2026-56411",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56411"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56411",
          "url": "https://www.suse.com/security/cve/CVE-2026-56411"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268741 for CVE-2026-56411",
          "url": "https://bugzilla.suse.com/1268741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275096 for CVE-2026-56411",
          "url": "https://bugzilla.suse.com/1275096"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56411"
    },
    {
      "cve": "CVE-2026-56412",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56412"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56412",
          "url": "https://www.suse.com/security/cve/CVE-2026-56412"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268741 for CVE-2026-56412",
          "url": "https://bugzilla.suse.com/1268741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275096 for CVE-2026-56412",
          "url": "https://bugzilla.suse.com/1275096"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275859 for CVE-2026-56412",
          "url": "https://bugzilla.suse.com/1275859"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56412"
    },
    {
      "cve": "CVE-2026-66046",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-66046"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an O(N^2) linear scan of elementType-\u003edefaultAtts to determine CDATA status. A remote unauthenticated attacker can supply a single well-formed XML document of a few megabytes to an application parsing untrusted XML to cause excessive CPU consumption, resulting in denial of service without requiring authentication, external entity resolution, or non-default parser options.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-66046",
          "url": "https://www.suse.com/security/cve/CVE-2026-66046"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275708 for CVE-2026-66046",
          "url": "https://bugzilla.suse.com/1275708"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275915 for CVE-2026-66046",
          "url": "https://bugzilla.suse.com/1275915"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-66046"
    },
    {
      "cve": "CVE-2026-72522",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72522"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72522",
          "url": "https://www.suse.com/security/cve/CVE-2026-72522"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275593 for CVE-2026-72522",
          "url": "https://bugzilla.suse.com/1275593"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72522"
    },
    {
      "cve": "CVE-2026-76641",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-76641"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XML_ExternalEntityParserCreate. A struct size mismatch between ELEMENT_TYPE members causes storeAtts to read the attIndex member past allocated memory boundaries, resulting in failure to normalize whitespace in non-CDATA attributes or a wild pointer dereference causing a segfault. This vulnerability was introduced by the fix for CVE-2026-66046.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-76641",
          "url": "https://www.suse.com/security/cve/CVE-2026-76641"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275915 for CVE-2026-76641",
          "url": "https://bugzilla.suse.com/1275915"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-76641"
    },
    {
      "cve": "CVE-2026-76956",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-76956"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy\u0027s return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-76956",
          "url": "https://www.suse.com/security/cve/CVE-2026-76956"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275860 for CVE-2026-76956",
          "url": "https://bugzilla.suse.com/1275860"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-76956"
    },
    {
      "cve": "CVE-2026-76957",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-76957"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-76957",
          "url": "https://www.suse.com/security/cve/CVE-2026-76957"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275859 for CVE-2026-76957",
          "url": "https://bugzilla.suse.com/1275859"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-76957"
    },
    {
      "cve": "CVE-2026-93990",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-93990"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Expat before 2.8.5 fails to validate that a high surrogate in UTF-16 input is followed by a low surrogate, allowing malformed UTF-16 sequences to be accepted. Attackers can supply UTF-16 encoded XML containing lone high surrogates that consume the following code unit, causing Expat to pass unpaired surrogates to applications built with XML_UNICODE and to silently replace input characters in other builds.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-93990",
          "url": "https://www.suse.com/security/cve/CVE-2026-93990"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282347 for CVE-2026-93990",
          "url": "https://bugzilla.suse.com/1282347"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-devel-0:153.5.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-common-0:153.5.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaFirefox-translations-other-0:153.5.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-19T14:43:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-93990"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.