https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 17:36:28 +0000 https://vulnerability.circl.lu/vuln/alsa-2026:69461 <p><strong>Affected:</strong> AlmaLinux:10: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.</p> <p>Security Fix(es):</p> <p>* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024) * firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019) * firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026) * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031) * firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011) * firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027) * firefox: thunderbird: Use-after-free in the DOM: Core &amp; HTML component (CVE-2026-92028) * firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013) * firefox: thunderbird: Use-after-free in the Disab…</p> <p><strong>Affected:</strong> AlmaLinux:10: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.</p> <p>Security Fix(es):</p> <p>* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024) * firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019) * firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026) * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031) * firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011) * firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027) * firefox: thunderbird: Use-after-free in the DOM: Core &amp; HTML component (CVE-2026-92028) * firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013) * firefox: thunderbird: Use-after-free in the Disab…</p> https://vulnerability.circl.lu/vuln/alsa-2026:69461 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1183 certfr-2026-avi-1183 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1183 https://vulnerability.circl.lu/vuln/fkie_cve-2026-92015 <p>Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.</p> <p>Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-92015 https://vulnerability.circl.lu/vuln/ghsa-7j9r-93j5-qmvf <p>Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.</p> <p>Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.</p> https://vulnerability.circl.lu/vuln/ghsa-7j9r-93j5-qmvf https://vulnerability.circl.lu/vuln/oesa-2026-4120 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es):</p> <p>Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92005)</p> <p>Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92006)</p> <p>Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92007)</p> <p>Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92008)</p> <p>Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92009)</p> <p>Privilege escalation due to inco…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es):</p> <p>Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92005)</p> <p>Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92006)</p> <p>Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92007)</p> <p>Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92008)</p> <p>Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92009)</p> <p>Privilege escalation due to inco…</p> https://vulnerability.circl.lu/vuln/oesa-2026-4120 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11796-1 <p>firefox-esr-153.3.0-1.1 on GA media</p> <p>firefox-esr-153.3.0-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11796-1 https://vulnerability.circl.lu/vuln/rlsa-2026:69461 <p><strong>Affected:</strong> Rocky Linux:10: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.</p> <p>Security Fix(es):</p> <p>* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)</p> <p>* firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)</p> <p>* firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)</p> <p>* firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)</p> <p>* firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)</p> <p>* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)</p> <p>* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)</p> <p>* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)</p> <p>* firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)</p> <p>* firefox: thunderbird: Use-after-free in the DOM: Core &amp; HTML component (CVE-2026-92028)</p> <p>* firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)</p> <p>* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)</p> <p>* firefox: thunderbird: Use-after-free in the Disability Access APIs…</p> <p><strong>Affected:</strong> Rocky Linux:10: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.</p> <p>Security Fix(es):</p> <p>* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)</p> <p>* firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)</p> <p>* firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)</p> <p>* firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)</p> <p>* firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)</p> <p>* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)</p> <p>* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)</p> <p>* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)</p> <p>* firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)</p> <p>* firefox: thunderbird: Use-after-free in the DOM: Core &amp; HTML component (CVE-2026-92028)</p> <p>* firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)</p> <p>* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)</p> <p>* firefox: thunderbird: Use-after-free in the Disability Access APIs…</p> https://vulnerability.circl.lu/vuln/rlsa-2026:69461 https://vulnerability.circl.lu/vuln/suse-su-2026:23918-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://vulnerability.circl.lu/vuln/suse-su-2026:23918-1 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-92015 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115</p> <p>Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115</p> <p>Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-92015