Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-12295 (GCVE-0-2026-12295)
Vulnerability from cvelistv5 – Published: 2026-06-16 11:52 – Updated: 2026-07-15 11:48
VLAI
EPSS
VEX
Title
Sandbox escape in the DOM: Navigation component
Summary
Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
Severity
9.6 (Critical)
7.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
30 references
Impacted products
19 products
| Vendor | Product | Version | |
|---|---|---|---|
| Mozilla | Firefox |
Unaffected:
115.37 , ≤ 115.*
(rpm)
Unaffected: 140.12 , ≤ 140.* (rpm) Unaffected: 152 , ≤ * (rpm) |
|
| Mozilla | Thunderbird |
Unaffected:
140.12 , ≤ 140.*
(rpm)
Unaffected: 152 , ≤ * (rpm) |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:140.12.0-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:140.12.0-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:140.12.0-1.el7_9 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:140.12.0-1.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:140.12.0-1.el8_4 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:140.12.0-1.el8_4 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:140.12.0-1.el8_6 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On |
Unaffected:
0:140.12.0-1.el8_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:140.12.0-1.el8_8 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:140.12.0-1.el8_8 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:140.12.0-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:140.12.0-1.el9_2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:140.12.0-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:140.12.0-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
|
| Red Hat | Red Hat Enterprise Linux 6 |
cpe:/o:redhat:enterprise_linux:6 |
|
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7 |
Credits
Yaqoub Aldurayhim
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-12295",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-18T14:22:12.218567Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-693",
"description": "CWE-693 Protection Mechanism Failure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-18T16:11:07.626Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el7_9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el8_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4"
],
"defaultStatus": "affected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el8_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el8_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4"
],
"defaultStatus": "affected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el8_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6"
],
"defaultStatus": "affected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.6"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.6"
],
"defaultStatus": "affected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el9_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:140.12.0-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10/firefox-flatpak",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10/thunderbird-flatpak",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "unknown",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "unknown",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unknown",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
}
],
"datePublic": "2026-06-16T11:52:28.892Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSandbox escape in the DOM: Navigation component"
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-653",
"description": "Improper Isolation or Compartmentalization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-15T11:48:19.261Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-12295"
},
{
"name": "RHBZ#2489226",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489226"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12295.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:38506"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36100"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:38751"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27733"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30846"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27717"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33445"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36102"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39428"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37210"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39141"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36103"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39142"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36101"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39706"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39011"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:38753"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37391"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:38750"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27734"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29940"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:38506: Red Hat Enterprise Linux Server (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:36100: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:38751: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:27733: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:30846: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:27717: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:33445: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:36102: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:39428: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:37210: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:39141: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:36103: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:39142: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:36101: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:39706: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:39011: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:38753: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:37391: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:38750: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:27734: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:29940: Red Hat Enterprise Linux AppStream (v. 9)"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-16T14:01:52.693Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-06-16T11:52:28.892Z",
"value": "Made public."
}
],
"title": "firefox: thunderbird: Sandbox escape in the DOM: Navigation component",
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "Firefox",
"vendor": "Mozilla",
"versions": [
{
"lessThanOrEqual": "115.*",
"status": "unaffected",
"version": "115.37",
"versionType": "rpm"
},
{
"lessThanOrEqual": "140.*",
"status": "unaffected",
"version": "140.12",
"versionType": "rpm"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "152",
"versionType": "rpm"
}
]
},
{
"product": "Thunderbird",
"vendor": "Mozilla",
"versions": [
{
"lessThanOrEqual": "140.*",
"status": "unaffected",
"version": "140.12",
"versionType": "rpm"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "152",
"versionType": "rpm"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Yaqoub Aldurayhim"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12."
}
],
"value": "Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12."
}
],
"providerMetadata": {
"dateUpdated": "2026-06-16T16:08:27.150Z",
"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
"shortName": "mozilla"
},
"references": [
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2040160"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-57/"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-58/"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-59/"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-60/"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-61/"
}
],
"title": "Sandbox escape in the DOM: Navigation component"
}
},
"cveMetadata": {
"assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
"assignerShortName": "mozilla",
"cveId": "CVE-2026-12295",
"datePublished": "2026-06-16T11:52:28.892Z",
"dateReserved": "2026-06-15T15:08:08.316Z",
"dateUpdated": "2026-07-15T11:48:19.261Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-12295",
"date": "2026-07-20",
"epss": "0.00393",
"percentile": "0.31643"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-12295\",\"sourceIdentifier\":\"security@mozilla.org\",\"published\":\"2026-06-16T13:16:29.737\",\"lastModified\":\"2026-07-15T12:17:05.637\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.\"}],\"affected\":[{\"source\":\"security@mozilla.org\",\"affectedData\":[{\"vendor\":\"Mozilla\",\"product\":\"Firefox\",\"versions\":[{\"version\":\"115.37\",\"lessThanOrEqual\":\"115.*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"140.12\",\"lessThanOrEqual\":\"140.*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"152\",\"lessThanOrEqual\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Mozilla\",\"product\":\"Thunderbird\",\"versions\":[{\"version\":\"140.12\",\"lessThanOrEqual\":\"140.*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"152\",\"lessThanOrEqual\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:140.12.0-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:140.12.0-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:140.12.0-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:140.12.0-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:140.12.0-1.el7_9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:140.12.0-1.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:140.12.0-1.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4\"],\"versions\":[{\"version\":\"0:140.12.0-1.el8_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4\"],\"versions\":[{\"version\":\"0:140.12.0-1.el8_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4\"],\"versions\":[{\"version\":\"0:140.12.0-1.el8_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4\"],\"versions\":[{\"version\":\"0:140.12.0-1.el8_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6\"],\"versions\":[{\"version\":\"0:140.12.0-1.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6\"],\"versions\":[{\"version\":\"0:140.12.0-1.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.6\"],\"versions\":[{\"version\":\"0:140.12.0-1.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.6\"],\"versions\":[{\"version\":\"0:140.12.0-1.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"0:140.12.0-1.el8_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"0:140.12.0-1.el8_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"0:140.12.0-1.el8_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"0:140.12.0-1.el8_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:140.12.0-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:140.12.0-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"0:140.12.0-1.el9_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:140.12.0-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:140.12.0-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:140.12.0-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:140.12.0-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/firefox-flatpak\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/thunderbird-flatpak\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H\",\"baseScore\":9.6,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":6.0},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.6,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-18T14:22:12.218567Z\",\"id\":\"CVE-2026-12295\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-693\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-653\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*\",\"versionEndExcluding\":\"115.37.0\",\"matchCriteriaId\":\"60E86F4A-420C-4F69-8081-79D1F64411C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*\",\"versionEndExcluding\":\"152.0.0\",\"matchCriteriaId\":\"26C07C15-4B40-4068-A2F1-BE3E597D14B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*\",\"versionStartIncluding\":\"128.0\",\"versionEndExcluding\":\"140.12.0\",\"matchCriteriaId\":\"034DA8EC-AD2B-4304-974F-078901E541D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*\",\"versionEndExcluding\":\"140.12.0\",\"matchCriteriaId\":\"767E6445-0CE7-46B5-A02B-EC06D37E45F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*\",\"versionEndExcluding\":\"152.0.0\",\"matchCriteriaId\":\"77D88ED0-AABD-4312-98B8-3D4B70226577\"}]}]}],\"references\":[{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=2040160\",\"source\":\"security@mozilla.org\",\"tags\":[\"Permissions Required\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2026-57/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2026-58/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2026-59/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2026-60/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2026-61/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27717\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27733\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27734\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29940\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30846\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33445\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36100\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36101\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36102\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36103\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37210\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37391\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:38506\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:38750\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:38751\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:38753\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39011\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39141\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39142\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39428\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39706\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-12295\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2489226\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12295.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-07-15T05:31:06+00:00",
"cve": "CVE-2026-12295",
"id": "CVE-2026-12295",
"initial_release_date": "2026-06-16T11:52:28.892000+00:00",
"product_status:fixed": "260",
"product_status:known_affected": "8",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "firefox: thunderbird: Sandbox escape in the DOM: Navigation component",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12295.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "critical",
"current_release_date": "2026-07-15T05:36:45Z",
"cve": "CVE-2026-12295",
"id": "CVE-2026-12295",
"initial_release_date": "2026-06-17T02:23:15Z",
"product_status:known_affected": "30",
"product_status:recommended": "125",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-12295",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-12295.json",
"version": "9"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"firefox: thunderbird: Sandbox escape in the DOM: Navigation component\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"firefox\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"thunderbird\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el7_9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el8_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el8_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el8_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el8_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el9_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:140.12.0-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/firefox-flatpak\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/thunderbird-flatpak\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-06-16T14:01:52.693Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-06-16T11:52:28.892Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:38506: Red Hat Enterprise Linux Server (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36100: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:38751: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27733: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30846: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27717: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33445: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36102: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39428: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37210: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39141: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36103: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39142: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36101: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39706: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39011: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:38753: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37391: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:38750: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27734: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29940: Red Hat Enterprise Linux AppStream (v. 9)\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-06-16T11:52:28.892Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-12295\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2489226\", \"name\": \"RHBZ#2489226\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12295.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:38506\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36100\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:38751\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27733\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30846\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27717\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33445\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36102\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39428\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37210\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39141\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36103\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39142\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36101\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39706\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39011\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:38753\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37391\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:38750\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27734\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29940\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\\nSandbox escape in the DOM: Navigation component\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-653\", \"description\": \"Improper Isolation or Compartmentalization\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-15T11:48:19.261Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 9.6, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-12295\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-18T14:22:12.218567Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-693\", \"description\": \"CWE-693 Protection Mechanism Failure\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-18T14:22:33.003Z\"}}], \"cna\": {\"title\": \"Sandbox escape in the DOM: Navigation component\", \"credits\": [{\"lang\": \"en\", \"value\": \"Yaqoub Aldurayhim\"}], \"affected\": [{\"vendor\": \"Mozilla\", \"product\": \"Firefox\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"115.37\", \"versionType\": \"rpm\", \"lessThanOrEqual\": \"115.*\"}, {\"status\": \"unaffected\", \"version\": \"140.12\", \"versionType\": \"rpm\", \"lessThanOrEqual\": \"140.*\"}, {\"status\": \"unaffected\", \"version\": \"152\", \"versionType\": \"rpm\", \"lessThanOrEqual\": \"*\"}]}, {\"vendor\": \"Mozilla\", \"product\": \"Thunderbird\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"140.12\", \"versionType\": \"rpm\", \"lessThanOrEqual\": \"140.*\"}, {\"status\": \"unaffected\", \"version\": \"152\", \"versionType\": \"rpm\", \"lessThanOrEqual\": \"*\"}]}], \"references\": [{\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=2040160\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2026-57/\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2026-58/\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2026-59/\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2026-60/\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2026-61/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.\", \"base64\": false}]}], \"providerMetadata\": {\"orgId\": \"f16b083a-5664-49f3-a51e-8d479e5ed7fe\", \"shortName\": \"mozilla\", \"dateUpdated\": \"2026-06-16T16:08:27.150Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-12295\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-15T11:48:19.261Z\", \"dateReserved\": \"2026-06-15T15:08:08.316Z\", \"assignerOrgId\": \"f16b083a-5664-49f3-a51e-8d479e5ed7fe\", \"datePublished\": \"2026-06-16T11:52:28.892Z\", \"assignerShortName\": \"mozilla\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
SUSE-SU-2026:2583-1
Vulnerability from csaf_suse - Published: 2026-06-23 13:27 - Updated: 2026-06-23 13:27Summary
Security update for MozillaFirefox
Severity
Important
Notes
Title of the patch: Security update for MozillaFirefox
Description of the patch: This update for MozillaFirefox fixes the following issues:
Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071):
- CVE-2026-12289: Privilege escalation in the Graphics: WebRender component.
- CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12291: Use-after-free in the Networking: HTTP component.
- CVE-2026-12292: Incorrect boundary conditions in the Web Audio component.
- CVE-2026-12294: Sandbox escape in the DOM: Workers component.
- CVE-2026-12295: Sandbox escape in the DOM: Navigation component.
- CVE-2026-12296: Sandbox escape in the Security: Process Sandboxing component.
- CVE-2026-12297: Sandbox escape due to incorrect boundary conditions in the Networking component.
- CVE-2026-12298: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12299: JIT miscompilation in the DOM: Core & HTML component.
- CVE-2026-12302: Mitigation bypass in the DOM: Security component.
- CVE-2026-12304: Same-origin policy bypass in the Networking: Cookies component.
- CVE-2026-12305: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12306: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12307: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12308: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12309: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12310: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12311: Information disclosure, sandbox escape in the Security: Process Sandboxing component.
- CVE-2026-12312: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12313: Information disclosure, sandbox escape in the Security: Process Sandboxing component.
- CVE-2026-12314: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12315: Mitigation bypass in the DOM: Security component.
- CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL component.
- CVE-2026-12325: Denial-of-service in the Graphics: ImageLib component.
- CVE-2026-12327: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird
152.
- CVE-2026-12328: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox
152 and Thunderbird 152.
- CVE-2026-12329: Memory safety bug fixed in Firefox ESR 140.12.
- CVE-2026-12330: Incorrect boundary conditions in the Internationalization component.
Patchnames: SUSE-2026-2583,SUSE-SLE-SERVER-12-SP5-LTSS-2026-2583,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2583
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.1 (High)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
6.3 (Medium)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
5.4 (Medium)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
5.4 (Medium)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9.1 (Critical)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
7.5 (High)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
5.3 (Medium)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
5.3 (Medium)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
5.3 (Medium)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
7.5 (High)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
4.7 (Medium)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
7.5 (High)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
4.7 (Medium)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
7.5 (High)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9.1 (Critical)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
7.3 (High)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.1 (High)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
8.1 (High)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
5.3 (Medium)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
5.4 (Medium)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
References
92 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaFirefox",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for MozillaFirefox fixes the following issues:\n\nUpdate to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071):\n\n- CVE-2026-12289: Privilege escalation in the Graphics: WebRender component.\n- CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12.\n- CVE-2026-12291: Use-after-free in the Networking: HTTP component.\n- CVE-2026-12292: Incorrect boundary conditions in the Web Audio component.\n- CVE-2026-12294: Sandbox escape in the DOM: Workers component.\n- CVE-2026-12295: Sandbox escape in the DOM: Navigation component.\n- CVE-2026-12296: Sandbox escape in the Security: Process Sandboxing component.\n- CVE-2026-12297: Sandbox escape due to incorrect boundary conditions in the Networking component.\n- CVE-2026-12298: Memory safety bug fixed in Firefox ESR 140.12.\n- CVE-2026-12299: JIT miscompilation in the DOM: Core \u0026 HTML component.\n- CVE-2026-12302: Mitigation bypass in the DOM: Security component.\n- CVE-2026-12304: Same-origin policy bypass in the Networking: Cookies component.\n- CVE-2026-12305: Memory safety bug fixed in Firefox ESR 140.12.\n- CVE-2026-12306: Memory safety bug fixed in Firefox ESR 140.12.\n- CVE-2026-12307: Memory safety bug fixed in Firefox ESR 140.12.\n- CVE-2026-12308: Memory safety bug fixed in Firefox ESR 140.12.\n- CVE-2026-12309: Memory safety bug fixed in Firefox ESR 140.12.\n- CVE-2026-12310: Memory safety bug fixed in Firefox ESR 140.12.\n- CVE-2026-12311: Information disclosure, sandbox escape in the Security: Process Sandboxing component.\n- CVE-2026-12312: Memory safety bug fixed in Firefox ESR 140.12.\n- CVE-2026-12313: Information disclosure, sandbox escape in the Security: Process Sandboxing component.\n- CVE-2026-12314: Memory safety bug fixed in Firefox ESR 140.12.\n- CVE-2026-12315: Mitigation bypass in the DOM: Security component.\n- CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL component.\n- CVE-2026-12325: Denial-of-service in the Graphics: ImageLib component.\n- CVE-2026-12327: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird\n 152.\n- CVE-2026-12328: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox\n 152 and Thunderbird 152.\n- CVE-2026-12329: Memory safety bug fixed in Firefox ESR 140.12.\n- CVE-2026-12330: Incorrect boundary conditions in the Internationalization component.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2583,SUSE-SLE-SERVER-12-SP5-LTSS-2026-2583,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2583",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2583-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2583-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262583-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2583-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026963.html"
},
{
"category": "self",
"summary": "SUSE Bug 1268071",
"url": "https://bugzilla.suse.com/1268071"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12289 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12289/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12290 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12290/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12291 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12291/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12292 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12292/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12294 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12294/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12295 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12295/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12296 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12296/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12297 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12297/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12298 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12298/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12299 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12299/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12302 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12302/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12304 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12304/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12305 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12305/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12306 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12306/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12307 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12307/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12308 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12309 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12309/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12310 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12310/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12311 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12311/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12312 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12312/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12313 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12313/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12314 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12314/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12315 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12315/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12324 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12324/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12325 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12325/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12327 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12327/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12328 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12328/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12329 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12329/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12330 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12330/"
}
],
"title": "Security update for MozillaFirefox",
"tracking": {
"current_release_date": "2026-06-23T13:27:23Z",
"generator": {
"date": "2026-06-23T13:27:23Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2583-1",
"initial_release_date": "2026-06-23T13:27:23Z",
"revision_history": [
{
"date": "2026-06-23T13:27:23Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-140.12.0-112.321.1.aarch64",
"product": {
"name": "MozillaFirefox-140.12.0-112.321.1.aarch64",
"product_id": "MozillaFirefox-140.12.0-112.321.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-140.12.0-112.321.1.aarch64",
"product": {
"name": "MozillaFirefox-branding-upstream-140.12.0-112.321.1.aarch64",
"product_id": "MozillaFirefox-branding-upstream-140.12.0-112.321.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"product": {
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"product_id": "MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-140.12.0-112.321.1.aarch64",
"product": {
"name": "MozillaFirefox-translations-other-140.12.0-112.321.1.aarch64",
"product_id": "MozillaFirefox-translations-other-140.12.0-112.321.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"product": {
"name": "MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"product_id": "MozillaFirefox-devel-140.12.0-112.321.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-140.12.0-112.321.1.ppc64le",
"product": {
"name": "MozillaFirefox-140.12.0-112.321.1.ppc64le",
"product_id": "MozillaFirefox-140.12.0-112.321.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-140.12.0-112.321.1.ppc64le",
"product": {
"name": "MozillaFirefox-branding-upstream-140.12.0-112.321.1.ppc64le",
"product_id": "MozillaFirefox-branding-upstream-140.12.0-112.321.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"product": {
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"product_id": "MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-140.12.0-112.321.1.ppc64le",
"product": {
"name": "MozillaFirefox-translations-other-140.12.0-112.321.1.ppc64le",
"product_id": "MozillaFirefox-translations-other-140.12.0-112.321.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-140.12.0-112.321.1.s390x",
"product": {
"name": "MozillaFirefox-140.12.0-112.321.1.s390x",
"product_id": "MozillaFirefox-140.12.0-112.321.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-140.12.0-112.321.1.s390x",
"product": {
"name": "MozillaFirefox-branding-upstream-140.12.0-112.321.1.s390x",
"product_id": "MozillaFirefox-branding-upstream-140.12.0-112.321.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"product": {
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"product_id": "MozillaFirefox-translations-common-140.12.0-112.321.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-140.12.0-112.321.1.s390x",
"product": {
"name": "MozillaFirefox-translations-other-140.12.0-112.321.1.s390x",
"product_id": "MozillaFirefox-translations-other-140.12.0-112.321.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-140.12.0-112.321.1.x86_64",
"product": {
"name": "MozillaFirefox-140.12.0-112.321.1.x86_64",
"product_id": "MozillaFirefox-140.12.0-112.321.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-140.12.0-112.321.1.x86_64",
"product": {
"name": "MozillaFirefox-branding-upstream-140.12.0-112.321.1.x86_64",
"product_id": "MozillaFirefox-branding-upstream-140.12.0-112.321.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"product": {
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"product_id": "MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-140.12.0-112.321.1.x86_64",
"product": {
"name": "MozillaFirefox-translations-other-140.12.0-112.321.1.x86_64",
"product_id": "MozillaFirefox-translations-other-140.12.0-112.321.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-140.12.0-112.321.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64"
},
"product_reference": "MozillaFirefox-140.12.0-112.321.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-140.12.0-112.321.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le"
},
"product_reference": "MozillaFirefox-140.12.0-112.321.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-140.12.0-112.321.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x"
},
"product_reference": "MozillaFirefox-140.12.0-112.321.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-140.12.0-112.321.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64"
},
"product_reference": "MozillaFirefox-140.12.0-112.321.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-140.12.0-112.321.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch"
},
"product_reference": "MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-140.12.0-112.321.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64"
},
"product_reference": "MozillaFirefox-140.12.0-112.321.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-140.12.0-112.321.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le"
},
"product_reference": "MozillaFirefox-140.12.0-112.321.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-140.12.0-112.321.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x"
},
"product_reference": "MozillaFirefox-140.12.0-112.321.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-140.12.0-112.321.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64"
},
"product_reference": "MozillaFirefox-140.12.0-112.321.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-140.12.0-112.321.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch"
},
"product_reference": "MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-140.12.0-112.321.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64"
},
"product_reference": "MozillaFirefox-140.12.0-112.321.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-140.12.0-112.321.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch"
},
"product_reference": "MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12289",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12289"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12289",
"url": "https://www.suse.com/security/cve/CVE-2026-12289"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12289",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12289"
},
{
"cve": "CVE-2026-12290",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12290"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12290",
"url": "https://www.suse.com/security/cve/CVE-2026-12290"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12290",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12290"
},
{
"cve": "CVE-2026-12291",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12291"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12291",
"url": "https://www.suse.com/security/cve/CVE-2026-12291"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12291",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12291"
},
{
"cve": "CVE-2026-12292",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12292"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12292",
"url": "https://www.suse.com/security/cve/CVE-2026-12292"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12292",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12292"
},
{
"cve": "CVE-2026-12294",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12294"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12294",
"url": "https://www.suse.com/security/cve/CVE-2026-12294"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12294",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12294"
},
{
"cve": "CVE-2026-12295",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12295"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12295",
"url": "https://www.suse.com/security/cve/CVE-2026-12295"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12295",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12295"
},
{
"cve": "CVE-2026-12296",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12296"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12296",
"url": "https://www.suse.com/security/cve/CVE-2026-12296"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12296",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12296"
},
{
"cve": "CVE-2026-12297",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12297"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12297",
"url": "https://www.suse.com/security/cve/CVE-2026-12297"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12297",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12297"
},
{
"cve": "CVE-2026-12298",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12298"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12298",
"url": "https://www.suse.com/security/cve/CVE-2026-12298"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12298",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12298"
},
{
"cve": "CVE-2026-12299",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12299"
}
],
"notes": [
{
"category": "general",
"text": "JIT miscompilation in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12299",
"url": "https://www.suse.com/security/cve/CVE-2026-12299"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12299",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12299"
},
{
"cve": "CVE-2026-12302",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12302"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12302",
"url": "https://www.suse.com/security/cve/CVE-2026-12302"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12302",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12302"
},
{
"cve": "CVE-2026-12304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12304"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12304",
"url": "https://www.suse.com/security/cve/CVE-2026-12304"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12304",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12304"
},
{
"cve": "CVE-2026-12305",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12305"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12305",
"url": "https://www.suse.com/security/cve/CVE-2026-12305"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12305",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12305"
},
{
"cve": "CVE-2026-12306",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12306"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12306",
"url": "https://www.suse.com/security/cve/CVE-2026-12306"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12306",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12306"
},
{
"cve": "CVE-2026-12307",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12307"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12307",
"url": "https://www.suse.com/security/cve/CVE-2026-12307"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12307",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12307"
},
{
"cve": "CVE-2026-12308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12308"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12308",
"url": "https://www.suse.com/security/cve/CVE-2026-12308"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12308",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12308"
},
{
"cve": "CVE-2026-12309",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12309"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12309",
"url": "https://www.suse.com/security/cve/CVE-2026-12309"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12309",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12309"
},
{
"cve": "CVE-2026-12310",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12310"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12310",
"url": "https://www.suse.com/security/cve/CVE-2026-12310"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12310",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12310"
},
{
"cve": "CVE-2026-12311",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12311"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12311",
"url": "https://www.suse.com/security/cve/CVE-2026-12311"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12311",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12311"
},
{
"cve": "CVE-2026-12312",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12312"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12312",
"url": "https://www.suse.com/security/cve/CVE-2026-12312"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12312",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12312"
},
{
"cve": "CVE-2026-12313",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12313"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12313",
"url": "https://www.suse.com/security/cve/CVE-2026-12313"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12313",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12313"
},
{
"cve": "CVE-2026-12314",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12314"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12314",
"url": "https://www.suse.com/security/cve/CVE-2026-12314"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12314",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12314"
},
{
"cve": "CVE-2026-12315",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12315"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12315",
"url": "https://www.suse.com/security/cve/CVE-2026-12315"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12315",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12315"
},
{
"cve": "CVE-2026-12324",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12324"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12324",
"url": "https://www.suse.com/security/cve/CVE-2026-12324"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12324",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12324"
},
{
"cve": "CVE-2026-12325",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12325"
}
],
"notes": [
{
"category": "general",
"text": "Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12325",
"url": "https://www.suse.com/security/cve/CVE-2026-12325"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12325",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12325"
},
{
"cve": "CVE-2026-12327",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12327"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12327",
"url": "https://www.suse.com/security/cve/CVE-2026-12327"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12327",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12327"
},
{
"cve": "CVE-2026-12328",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12328"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12328",
"url": "https://www.suse.com/security/cve/CVE-2026-12328"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12328",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12328"
},
{
"cve": "CVE-2026-12329",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12329"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12329",
"url": "https://www.suse.com/security/cve/CVE-2026-12329"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12329",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12329"
},
{
"cve": "CVE-2026-12330",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12330"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 140.12, Firefox ESR 115.37, and Thunderbird 140.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12330",
"url": "https://www.suse.com/security/cve/CVE-2026-12330"
},
{
"category": "external",
"summary": "SUSE Bug 1268071 for CVE-2026-12330",
"url": "https://bugzilla.suse.com/1268071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-140.12.0-112.321.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-devel-140.12.0-112.321.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:MozillaFirefox-translations-common-140.12.0-112.321.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:27:23Z",
"details": "critical"
}
],
"title": "CVE-2026-12330"
}
]
}
ubuntu-cve-2026-12295
Vulnerability from osv_ubuntu
Published
2026-06-16 13:16
Modified
2026-06-30 16:18
Summary
Details
Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
Severity
9.6 (Critical)
7.5 (High)
N/A (UNKNOWN)
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmozjs-52-0",
"binary_version": "52.9.1-0ubuntu0.18.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "mozjs52",
"purl": "pkg:deb/ubuntu/mozjs52@52.9.1-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"52.3.1-0ubuntu3",
"52.3.1-7fakesync1",
"52.8.1-0ubuntu0.18.04.1",
"52.9.1-0ubuntu0.18.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmozjs-38-0",
"binary_version": "38.8.0~repack1-0ubuntu4"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "mozjs38",
"purl": "pkg:deb/ubuntu/mozjs38@38.8.0~repack1-0ubuntu4?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"38.8.0~repack1-0ubuntu1",
"38.8.0~repack1-0ubuntu3",
"38.8.0~repack1-0ubuntu4"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmozjs-68-0",
"binary_version": "68.6.0-1ubuntu1"
}
]
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "mozjs68",
"purl": "pkg:deb/ubuntu/mozjs68@68.6.0-1ubuntu1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"68.5.0-1~fakesync",
"68.5.0-2~fakesync",
"68.6.0-1",
"68.6.0-1ubuntu1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmozjs-52-0",
"binary_version": "52.9.1-1ubuntu3"
}
]
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "mozjs52",
"purl": "pkg:deb/ubuntu/mozjs52@52.9.1-1ubuntu3?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"52.9.1-1build1",
"52.9.1-1ubuntu3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmozjs-102-0",
"binary_version": "102.15.1-0ubuntu0.22.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "mozjs102",
"purl": "pkg:deb/ubuntu/mozjs102@102.15.1-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"102.11.0-0ubuntu0.22.04.1",
"102.12.0-0ubuntu0.22.04.1",
"102.13.0-0ubuntu0.22.04.1",
"102.15.1-0ubuntu0.22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmozjs-78-0",
"binary_version": "78.15.0-4ubuntu1"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "mozjs78",
"purl": "pkg:deb/ubuntu/mozjs78@78.15.0-4ubuntu1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"78.13.0-1",
"78.15.0-2",
"78.15.0-4ubuntu1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmozjs-91-0",
"binary_version": "91.10.0-0ubuntu1"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "mozjs91",
"purl": "pkg:deb/ubuntu/mozjs91@91.10.0-0ubuntu1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"91.5.1-0ubuntu1",
"91.6.0-1",
"91.6.0-2",
"91.7.0-2",
"91.10.0-0ubuntu1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "thunderbird",
"binary_version": "1:140.7.1+build1-0ubuntu0.22.04.1"
},
{
"binary_name": "thunderbird-gnome-support",
"binary_version": "1:140.7.1+build1-0ubuntu0.22.04.1"
},
{
"binary_name": "thunderbird-mozsymbols",
"binary_version": "1:140.7.1+build1-0ubuntu0.22.04.1"
},
{
"binary_name": "xul-ext-calendar-timezones",
"binary_version": "1:140.7.1+build1-0ubuntu0.22.04.1"
},
{
"binary_name": "xul-ext-gdata-provider",
"binary_version": "1:140.7.1+build1-0ubuntu0.22.04.1"
},
{
"binary_name": "xul-ext-lightning",
"binary_version": "1:140.7.1+build1-0ubuntu0.22.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "thunderbird",
"purl": "pkg:deb/ubuntu/thunderbird@1:140.7.1+build1-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1:91.1.2+build1-0ubuntu1",
"1:91.3.0+build2-0ubuntu1",
"1:91.3.1+build1-0ubuntu1",
"1:91.3.2+build1-0ubuntu1",
"1:91.4.0+build1.1-0ubuntu1",
"1:91.4.0+build2-0ubuntu1",
"1:91.5.0+build1-0ubuntu1",
"1:91.5.1+build1-0ubuntu1",
"1:91.6.1+build1-0ubuntu1",
"1:91.7.0+build1-0ubuntu1",
"1:91.7.0+build2-0ubuntu1",
"1:91.8.0+build2-0ubuntu1",
"1:91.9.1+build1-0ubuntu0.22.04.1",
"1:91.11.0+build2-0ubuntu0.22.04.1",
"1:102.2.2+build1-0ubuntu0.22.04.1",
"1:102.4.2+build2-0ubuntu0.22.04.1",
"1:102.7.1+build2-0ubuntu0.22.04.1",
"1:102.8.0+build2-0ubuntu0.22.04.1",
"1:102.9.0+build1-0ubuntu0.22.04.1",
"1:102.10.0+build2-0ubuntu0.22.04.1",
"1:102.11.0+build1-0ubuntu0.22.04.1",
"1:102.13.0+build1-0ubuntu0.22.04.1",
"1:102.15.0+build1-0ubuntu0.22.04.1",
"1:102.15.1+build1-0ubuntu0.22.04.1",
"1:115.3.1+build1-0ubuntu0.22.04.2",
"1:115.4.1+build1-0ubuntu0.22.04.1",
"1:115.5.0+build1-0ubuntu0.22.04.1",
"1:115.6.0+build2-0ubuntu0.22.04.1",
"1:115.8.1+build1-0ubuntu0.22.04.1",
"1:115.9.0+build1-0ubuntu0.22.04.1",
"1:115.10.1+build1-0ubuntu0.22.04.1",
"1:115.11.0+build2-0ubuntu0.22.04.1",
"1:115.12.0+build3-0ubuntu0.22.04.1",
"1:115.13.0+build5-0ubuntu0.22.04.1",
"1:115.15.0+build1-0ubuntu0.22.04.1",
"1:115.16.0+build2-0ubuntu0.22.04.1",
"1:115.18.0+build1-0ubuntu0.22.04.1",
"1:128.12.0+build1-0ubuntu0.22.04.1",
"1:140.7.1+build1-0ubuntu0.22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmozjs-102-0t64",
"binary_version": "102.15.1-3ubuntu2"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "mozjs102",
"purl": "pkg:deb/ubuntu/mozjs102@102.15.1-3ubuntu2?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"102.15.1-1",
"102.15.1-3ubuntu2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmozjs-115-0t64",
"binary_version": "115.10.0-1"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "mozjs115",
"purl": "pkg:deb/ubuntu/mozjs115@115.10.0-1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"115.3.0-0ubuntu1",
"115.4.0-2",
"115.5.0-1",
"115.6.0-1",
"115.7.0-4",
"115.8.0-1",
"115.9.0-1",
"115.9.0-1build1",
"115.10.0-1"
]
}
],
"aliases": [],
"details": "Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.",
"id": "UBUNTU-CVE-2026-12295",
"modified": "2026-06-30T16:18:43Z",
"published": "2026-06-16T13:16:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-12295"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12295"
},
{
"type": "REPORT",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12295"
},
{
"type": "REPORT",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/#CVE-2026-12295"
},
{
"type": "REPORT",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/#CVE-2026-12295"
}
],
"related": [],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-12295"
]
}
WID-SEC-W-2026-1959
Vulnerability from csaf_certbund - Published: 2026-06-16 22:00 - Updated: 2026-06-17 22:00Summary
Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Firefox ist ein Open Source Web Browser.
Firefox ist ein Open Source Web Browser.
ESR ist die Variante mit verlängertem Support.
Thunderbird ist ein Open Source E-Mail Client.
Angriff: Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Speicherbeschädigungen zu verursachen, Sicherheitsmaßnahmen zu umgehen und aus der Sandbox auszubrechen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und Denial-of-Service-Zustände auszulösen.
Betroffene Betriebssysteme: - Sonstiges
- UNIX
- Windows
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Mozilla Firefox ESR <140.12
Mozilla / Firefox ESR
|
<140.12 | ||
|
Mozilla Firefox <152
Mozilla / Firefox
|
<152 | ||
|
Mozilla Thunderbird <140.12
Mozilla / Thunderbird
|
<140.12 | ||
|
Mozilla Thunderbird <152
Mozilla / Thunderbird
|
<152 | ||
|
Mozilla Firefox ESR <115.37
Mozilla / Firefox ESR
|
<115.37 |
References
9 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Firefox ist ein Open Source Web Browser.\r\nFirefox ist ein Open Source Web Browser. \r\nESR ist die Variante mit verl\u00e4ngertem Support.\r\nThunderbird ist ein Open Source E-Mail Client.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuf\u00fchren, erweiterte Berechtigungen zu erlangen, Speicherbesch\u00e4digungen zu verursachen, Sicherheitsma\u00dfnahmen zu umgehen und aus der Sandbox auszubrechen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und Denial-of-Service-Zust\u00e4nde auszul\u00f6sen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-1959 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1959.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-1959 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1959"
},
{
"category": "external",
"summary": "Mozilla Security Advisory mfsa2026-57 vom 2026-06-16",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/"
},
{
"category": "external",
"summary": "Mozilla Security Advisory mfsa2026-57 vom 2026-06-16",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/"
},
{
"category": "external",
"summary": "Mozilla Security Advisory mfsa2026-58 vom 2026-06-16",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/"
},
{
"category": "external",
"summary": "Mozilla Security Advisory mfsa2026-59 vom 2026-06-16",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-59/"
},
{
"category": "external",
"summary": "Mozilla Security Advisory mfsa2026-60 vom 2026-06-16",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-60/"
},
{
"category": "external",
"summary": "Mozilla Security Advisory mfsa2026-61 vom 2026-06-16",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-6350 vom 2026-06-17",
"url": "https://security-tracker.debian.org/tracker/DSA-6350-1"
}
],
"source_lang": "en-US",
"title": "Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-06-17T22:00:00.000+00:00",
"generator": {
"date": "2026-06-18T07:59:54.305+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-1959",
"initial_release_date": "2026-06-16T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-06-16T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2026-06-17T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Debian aufgenommen"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c152",
"product": {
"name": "Mozilla Firefox \u003c152",
"product_id": "T055508"
}
},
{
"category": "product_version",
"name": "152",
"product": {
"name": "Mozilla Firefox 152",
"product_id": "T055508-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:mozilla:firefox:152"
}
}
}
],
"category": "product_name",
"name": "Firefox"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c140.12",
"product": {
"name": "Mozilla Firefox ESR \u003c140.12",
"product_id": "T055509"
}
},
{
"category": "product_version",
"name": "140.12",
"product": {
"name": "Mozilla Firefox ESR 140.12",
"product_id": "T055509-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:mozilla:firefox_esr:140.12"
}
}
},
{
"category": "product_version_range",
"name": "\u003c115.37",
"product": {
"name": "Mozilla Firefox ESR \u003c115.37",
"product_id": "T055510"
}
},
{
"category": "product_version",
"name": "115.37",
"product": {
"name": "Mozilla Firefox ESR 115.37",
"product_id": "T055510-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:mozilla:firefox_esr:115.37"
}
}
}
],
"category": "product_name",
"name": "Firefox ESR"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c152",
"product": {
"name": "Mozilla Thunderbird \u003c152",
"product_id": "T055511"
}
},
{
"category": "product_version",
"name": "152",
"product": {
"name": "Mozilla Thunderbird 152",
"product_id": "T055511-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:mozilla:thunderbird:152"
}
}
},
{
"category": "product_version_range",
"name": "\u003c140.12",
"product": {
"name": "Mozilla Thunderbird \u003c140.12",
"product_id": "T055512"
}
},
{
"category": "product_version",
"name": "140.12",
"product": {
"name": "Mozilla Thunderbird 140.12",
"product_id": "T055512-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:mozilla:thunderbird:140.12"
}
}
}
],
"category": "product_name",
"name": "Thunderbird"
}
],
"category": "vendor",
"name": "Mozilla"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12289",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12289"
},
{
"cve": "CVE-2026-12290",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12290"
},
{
"cve": "CVE-2026-12291",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12291"
},
{
"cve": "CVE-2026-12292",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12292"
},
{
"cve": "CVE-2026-12293",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12293"
},
{
"cve": "CVE-2026-12294",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12294"
},
{
"cve": "CVE-2026-12295",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12295"
},
{
"cve": "CVE-2026-12296",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12296"
},
{
"cve": "CVE-2026-12297",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12297"
},
{
"cve": "CVE-2026-12298",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12298"
},
{
"cve": "CVE-2026-12299",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12299"
},
{
"cve": "CVE-2026-12300",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12300"
},
{
"cve": "CVE-2026-12301",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12301"
},
{
"cve": "CVE-2026-12302",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12302"
},
{
"cve": "CVE-2026-12303",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12303"
},
{
"cve": "CVE-2026-12304",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12304"
},
{
"cve": "CVE-2026-12305",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12305"
},
{
"cve": "CVE-2026-12306",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12306"
},
{
"cve": "CVE-2026-12307",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12307"
},
{
"cve": "CVE-2026-12308",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12308"
},
{
"cve": "CVE-2026-12309",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12309"
},
{
"cve": "CVE-2026-12310",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12310"
},
{
"cve": "CVE-2026-12311",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12311"
},
{
"cve": "CVE-2026-12312",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12312"
},
{
"cve": "CVE-2026-12313",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12313"
},
{
"cve": "CVE-2026-12314",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12314"
},
{
"cve": "CVE-2026-12315",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12315"
},
{
"cve": "CVE-2026-12316",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12316"
},
{
"cve": "CVE-2026-12317",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12317"
},
{
"cve": "CVE-2026-12318",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12318"
},
{
"cve": "CVE-2026-12319",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12319"
},
{
"cve": "CVE-2026-12320",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12320"
},
{
"cve": "CVE-2026-12321",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12321"
},
{
"cve": "CVE-2026-12322",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12322"
},
{
"cve": "CVE-2026-12323",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12323"
},
{
"cve": "CVE-2026-12324",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12324"
},
{
"cve": "CVE-2026-12325",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12325"
},
{
"cve": "CVE-2026-12326",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12326"
},
{
"cve": "CVE-2026-12327",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12327"
},
{
"cve": "CVE-2026-12328",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12328"
},
{
"cve": "CVE-2026-12329",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12329"
},
{
"cve": "CVE-2026-12330",
"product_status": {
"known_affected": [
"2951",
"T055509",
"T055508",
"T055512",
"T055511",
"T055510"
]
},
"release_date": "2026-06-16T22:00:00.000+00:00",
"title": "CVE-2026-12330"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…