csaf_suse - suse-su-2025:0080-1

Vulnerability from csaf_suse

Published

2025-01-13 15:30

Modified

2025-01-13 15:30

Summary

Security update for MozillaThunderbird

Notes

Title of the patch

Security update for MozillaThunderbird

Description of the patch

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird ESR 128.6 (MFSA 2025-05, bsc#1234991) Security fixes: - CVE-2025-0237 (bmo#1915257) WebChannel APIs susceptible to confused deputy attack - CVE-2025-0238 (bmo#1915535) Use-after-free when breaking lines in text - CVE-2025-0239 (bmo#1929156) Alt-Svc ALPN validation failure when redirected - CVE-2025-0240 (bmo#1929623) Compartment mismatch when parsing JavaScript JSON module - CVE-2025-0241 (bmo#1933023) Memory corruption when using JavaScript Text Segmentation - CVE-2025-0242 (bmo#1874523, bmo#1926454, bmo#1931873, bmo#1932169) Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 - CVE-2025-0243 (bmo#1827142, bmo#1932783) Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 Other fixes: - fixed: New mail notification was not hidden after reading the new message (bmo#1920077) - fixed: New mail notification could show for the wrong folder, causing repeated alerts (bmo#1926462) - fixed: macOS shortcut CMD+1 did not restore the main window when it was minimized (bmo#1857953) - fixed: Clicking the context menu 'Reply' button resulted in 'Reply-All' (bmo#1935883) - fixed: Switching from 'All', 'Unread', and 'Threads with unread' did not work (bmo#1921618) - fixed: Downloading message headers from a newsgroup could cause a hang (bmo#1931661) - fixed: Message list performance slow when many updates happened at once (bmo#1933104) - fixed: 'mailto:' links did not apply the compose format of the current identity (bmo#550414) - fixed: Authentication failure of AUTH PLAIN or AUTH LOGIN did not fall back to USERPASS (bmo#1928026)

Patchnames

SUSE-2025-80,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-80,SUSE-SLE-Product-WE-15-SP6-2025-80,openSUSE-SLE-15.6-2025-80

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for MozillaThunderbird",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for MozillaThunderbird fixes the following issues:\n\nUpdate to Mozilla Thunderbird ESR 128.6 (MFSA 2025-05, bsc#1234991)\n\nSecurity fixes:\n\n  - CVE-2025-0237 (bmo#1915257)\n    WebChannel APIs susceptible to confused deputy attack\n  - CVE-2025-0238 (bmo#1915535)\n    Use-after-free when breaking lines in text\n  - CVE-2025-0239 (bmo#1929156)\n    Alt-Svc ALPN validation failure when redirected\n  - CVE-2025-0240 (bmo#1929623)\n    Compartment mismatch when parsing JavaScript JSON module\n  - CVE-2025-0241 (bmo#1933023)\n    Memory corruption when using JavaScript Text Segmentation\n  - CVE-2025-0242 (bmo#1874523, bmo#1926454, bmo#1931873,\n    bmo#1932169)\n    Memory safety bugs fixed in Firefox 134, Thunderbird 134,\n    Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19,\n    and Thunderbird 128.6\n  - CVE-2025-0243 (bmo#1827142, bmo#1932783)\n    Memory safety bugs fixed in Firefox 134, Thunderbird 134,\n    Firefox ESR 128.6, and Thunderbird 128.6\n\nOther fixes:\n\n  - fixed: New mail notification was not hidden after reading the\n    new message (bmo#1920077)\n  - fixed: New mail notification could show for the wrong folder,\n    causing repeated alerts (bmo#1926462)\n  - fixed: macOS shortcut CMD+1 did not restore the main window\n    when it was minimized (bmo#1857953)\n  - fixed: Clicking the context menu 'Reply' button resulted in\n    'Reply-All' (bmo#1935883)\n  - fixed: Switching from 'All', 'Unread', and 'Threads with\n    unread' did not work (bmo#1921618)\n  - fixed: Downloading message headers from a newsgroup could\n    cause a hang (bmo#1931661)\n  - fixed: Message list performance slow when many updates\n    happened at once (bmo#1933104)\n  - fixed: 'mailto:' links did not apply the compose format of\n    the current identity (bmo#550414)\n  - fixed: Authentication failure of AUTH PLAIN or AUTH LOGIN did\n    not fall back to USERPASS (bmo#1928026)\n\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2025-80,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-80,SUSE-SLE-Product-WE-15-SP6-2025-80,openSUSE-SLE-15.6-2025-80",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0080-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2025:0080-1",
            url: "https://www.suse.com/support/update/announcement/2025/suse-su-20250080-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2025:0080-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2025-January/020098.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234991",
            url: "https://bugzilla.suse.com/1234991",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-0237 page",
            url: "https://www.suse.com/security/cve/CVE-2025-0237/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-0238 page",
            url: "https://www.suse.com/security/cve/CVE-2025-0238/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-0239 page",
            url: "https://www.suse.com/security/cve/CVE-2025-0239/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-0240 page",
            url: "https://www.suse.com/security/cve/CVE-2025-0240/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-0241 page",
            url: "https://www.suse.com/security/cve/CVE-2025-0241/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-0242 page",
            url: "https://www.suse.com/security/cve/CVE-2025-0242/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-0243 page",
            url: "https://www.suse.com/security/cve/CVE-2025-0243/",
         },
      ],
      title: "Security update for MozillaThunderbird",
      tracking: {
         current_release_date: "2025-01-13T15:30:55Z",
         generator: {
            date: "2025-01-13T15:30:55Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2025:0080-1",
         initial_release_date: "2025-01-13T15:30:55Z",
         revision_history: [
            {
               date: "2025-01-13T15:30:55Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                        product: {
                           name: "MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                           product_id: "MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                        product: {
                           name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                           product_id: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                        product: {
                           name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                           product_id: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                        product: {
                           name: "MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                           product_id: "MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                        product: {
                           name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                           product_id: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                        product: {
                           name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                           product_id: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                        product: {
                           name: "MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                           product_id: "MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                        product: {
                           name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                           product_id: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                        product: {
                           name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                           product_id: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                        product: {
                           name: "MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                           product_id: "MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                        product: {
                           name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                           product_id: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                        product: {
                           name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                           product_id: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                        product: {
                           name: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                           product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:packagehub:15:sp6",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Workstation Extension 15 SP6",
                        product: {
                           name: "SUSE Linux Enterprise Workstation Extension 15 SP6",
                           product_id: "SUSE Linux Enterprise Workstation Extension 15 SP6",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-we:15:sp6",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "openSUSE Leap 15.6",
                        product: {
                           name: "openSUSE Leap 15.6",
                           product_id: "openSUSE Leap 15.6",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap:15.6",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-128.6.0-150200.8.197.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
            },
            product_reference: "MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
            },
            product_reference: "MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-128.6.0-150200.8.197.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
            },
            product_reference: "MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
            },
            product_reference: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
            },
            product_reference: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
            },
            product_reference: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
            },
            product_reference: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
            },
            product_reference: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
            },
            product_reference: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-128.6.0-150200.8.197.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
               product_id: "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
            },
            product_reference: "MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
               product_id: "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
            },
            product_reference: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
               product_id: "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
            },
            product_reference: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-128.6.0-150200.8.197.1.aarch64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
            },
            product_reference: "MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
            },
            product_reference: "MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-128.6.0-150200.8.197.1.s390x as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
            },
            product_reference: "MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-128.6.0-150200.8.197.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
            },
            product_reference: "MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
            },
            product_reference: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
            },
            product_reference: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
            },
            product_reference: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
            },
            product_reference: "MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
            },
            product_reference: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
            },
            product_reference: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
            },
            product_reference: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
            },
            product_reference: "MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2025-0237",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-0237",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-0237",
               url: "https://www.suse.com/security/cve/CVE-2025-0237",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234991 for CVE-2025-0237",
               url: "https://bugzilla.suse.com/1234991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-13T15:30:55Z",
               details: "important",
            },
         ],
         title: "CVE-2025-0237",
      },
      {
         cve: "CVE-2025-0238",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-0238",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Firefox ESR < 115.19, Thunderbird < 134, and Thunderbird < 128.6.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-0238",
               url: "https://www.suse.com/security/cve/CVE-2025-0238",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234991 for CVE-2025-0238",
               url: "https://bugzilla.suse.com/1234991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-13T15:30:55Z",
               details: "important",
            },
         ],
         title: "CVE-2025-0238",
      },
      {
         cve: "CVE-2025-0239",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-0239",
            },
         ],
         notes: [
            {
               category: "general",
               text: "When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-0239",
               url: "https://www.suse.com/security/cve/CVE-2025-0239",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234991 for CVE-2025-0239",
               url: "https://bugzilla.suse.com/1234991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-13T15:30:55Z",
               details: "important",
            },
         ],
         title: "CVE-2025-0239",
      },
      {
         cve: "CVE-2025-0240",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-0240",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-0240",
               url: "https://www.suse.com/security/cve/CVE-2025-0240",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234991 for CVE-2025-0240",
               url: "https://bugzilla.suse.com/1234991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-13T15:30:55Z",
               details: "important",
            },
         ],
         title: "CVE-2025-0240",
      },
      {
         cve: "CVE-2025-0241",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-0241",
            },
         ],
         notes: [
            {
               category: "general",
               text: "When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-0241",
               url: "https://www.suse.com/security/cve/CVE-2025-0241",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234991 for CVE-2025-0241",
               url: "https://bugzilla.suse.com/1234991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-13T15:30:55Z",
               details: "important",
            },
         ],
         title: "CVE-2025-0241",
      },
      {
         cve: "CVE-2025-0242",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-0242",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Firefox ESR < 115.19, Thunderbird < 134, and Thunderbird < 128.6.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-0242",
               url: "https://www.suse.com/security/cve/CVE-2025-0242",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234991 for CVE-2025-0242",
               url: "https://bugzilla.suse.com/1234991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-13T15:30:55Z",
               details: "important",
            },
         ],
         title: "CVE-2025-0242",
      },
      {
         cve: "CVE-2025-0243",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-0243",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
               "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-0243",
               url: "https://www.suse.com/security/cve/CVE-2025-0243",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234991 for CVE-2025-0243",
               url: "https://bugzilla.suse.com/1234991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.6.0-150200.8.197.1.x86_64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.aarch64",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.ppc64le",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.s390x",
                  "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.6.0-150200.8.197.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-13T15:30:55Z",
               details: "important",
            },
         ],
         title: "CVE-2025-0243",
      },
   ],
}

cve-2025-0241

Vulnerability from cvelistv5

Published

2025-01-07 16:07

Modified

2025-01-30 21:31

Severity ?

7.7 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Summary

When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1933023
	https://www.mozilla.org/security/advisories/mfsa2025-01/
	https://www.mozilla.org/security/advisories/mfsa2025-02/
	https://www.mozilla.org/security/advisories/mfsa2025-04/
	https://www.mozilla.org/security/advisories/mfsa2025-05/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 134

Mozilla	Firefox ESR	Version: unspecified < 128.6
Mozilla	Thunderbird	Version: unspecified < 134
Mozilla	Thunderbird	Version: unspecified < 128.6

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "HIGH",
                     attackVector: "NETWORK",
                     availabilityImpact: "LOW",
                     baseScore: 7.7,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2025-0241",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-01-08T17:27:29.787356Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-401",
                        description: "CWE-401 Missing Release of Memory after Effective Lifetime",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-01-30T21:31:19.824Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Firefox",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "134",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "128.6",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "134",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "128.6",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Nils Bars",
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
                  },
               ],
               value: "When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Memory corruption when using JavaScript Text Segmentation",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-13T21:54:59.970Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1933023",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-01/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-02/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-04/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-05/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2025-0241",
      datePublished: "2025-01-07T16:07:06.824Z",
      dateReserved: "2025-01-06T14:49:09.192Z",
      dateUpdated: "2025-01-30T21:31:19.824Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-0237

Vulnerability from cvelistv5

Published

2025-01-07 16:07

Modified

2025-01-13 21:54

Severity ?

5.4 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Summary

The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1915257
	https://www.mozilla.org/security/advisories/mfsa2025-01/
	https://www.mozilla.org/security/advisories/mfsa2025-02/
	https://www.mozilla.org/security/advisories/mfsa2025-04/
	https://www.mozilla.org/security/advisories/mfsa2025-05/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 134

Mozilla	Firefox ESR	Version: unspecified < 128.6
Mozilla	Thunderbird	Version: unspecified < 134
Mozilla	Thunderbird	Version: unspecified < 128.6

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "NONE",
                     baseScore: 5.4,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "LOW",
                     integrityImpact: "LOW",
                     privilegesRequired: "LOW",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2025-0237",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-01-08T15:57:56.339970Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-863",
                        description: "CWE-863 Incorrect Authorization",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-01-08T16:01:17.580Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Firefox",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "134",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "128.6",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "134",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "128.6",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Andrew McCreight",
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
                  },
               ],
               value: "The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "WebChannel APIs susceptible to confused deputy attack",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-13T21:54:58.675Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1915257",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-01/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-02/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-04/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-05/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2025-0237",
      datePublished: "2025-01-07T16:07:05.787Z",
      dateReserved: "2025-01-06T14:48:59.270Z",
      dateUpdated: "2025-01-13T21:54:58.675Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-0238

Vulnerability from cvelistv5

Published

2025-01-07 16:07

Modified

2025-01-13 21:54

Severity ?

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Summary

Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Firefox ESR < 115.19, Thunderbird < 134, and Thunderbird < 128.6.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1915535
	https://www.mozilla.org/security/advisories/mfsa2025-01/
	https://www.mozilla.org/security/advisories/mfsa2025-02/
	https://www.mozilla.org/security/advisories/mfsa2025-03/
	https://www.mozilla.org/security/advisories/mfsa2025-04/
	https://www.mozilla.org/security/advisories/mfsa2025-05/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 134

Mozilla	Firefox ESR	Version: unspecified < 128.6
Mozilla	Firefox ESR	Version: unspecified < 115.19
Mozilla	Thunderbird	Version: unspecified < 134
Mozilla	Thunderbird	Version: unspecified < 128.6

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "NONE",
                     baseScore: 5.3,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "LOW",
                     integrityImpact: "NONE",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2025-0238",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-01-08T16:24:00.630744Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-416",
                        description: "CWE-416 Use After Free",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-01-08T16:25:55.375Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Firefox",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "134",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "128.6",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "115.19",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "134",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "128.6",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Irvan Kurniawan",
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Firefox ESR < 115.19, Thunderbird < 134, and Thunderbird < 128.6.",
                  },
               ],
               value: "Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Firefox ESR < 115.19, Thunderbird < 134, and Thunderbird < 128.6.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Use-after-free when breaking lines in text",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-13T21:54:58.998Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1915535",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-01/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-02/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-03/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-04/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-05/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2025-0238",
      datePublished: "2025-01-07T16:07:06.043Z",
      dateReserved: "2025-01-06T14:49:02.331Z",
      dateUpdated: "2025-01-13T21:54:58.998Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-0243

Vulnerability from cvelistv5

Published

2025-01-07 16:07

Modified

2025-01-13 21:55

Severity ?

5.1 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Summary

Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1827142%2C1932783
	https://www.mozilla.org/security/advisories/mfsa2025-01/
	https://www.mozilla.org/security/advisories/mfsa2025-02/
	https://www.mozilla.org/security/advisories/mfsa2025-04/
	https://www.mozilla.org/security/advisories/mfsa2025-05/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 134

Mozilla	Firefox ESR	Version: unspecified < 128.6
Mozilla	Thunderbird	Version: unspecified < 134
Mozilla	Thunderbird	Version: unspecified < 128.6

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "LOCAL",
                     availabilityImpact: "NONE",
                     baseScore: 5.1,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "LOW",
                     integrityImpact: "LOW",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2025-0243",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-01-08T16:44:56.236753Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        description: "CWE-noinfo Not enough information",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-01-08T16:47:10.577Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Firefox",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "134",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "128.6",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "134",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "128.6",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Andrew Osmond and the Mozilla Fuzzing Team",
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
                  },
               ],
               value: "Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-13T21:55:00.882Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               name: "Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6",
               url: "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1827142%2C1932783",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-01/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-02/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-04/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-05/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2025-0243",
      datePublished: "2025-01-07T16:07:07.372Z",
      dateReserved: "2025-01-06T14:49:13.142Z",
      dateUpdated: "2025-01-13T21:55:00.882Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-0239

Vulnerability from cvelistv5

Published

2025-01-07 16:07

Modified

2025-01-13 21:54

Severity ?

4.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Summary

When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1929156
	https://www.mozilla.org/security/advisories/mfsa2025-01/
	https://www.mozilla.org/security/advisories/mfsa2025-02/
	https://www.mozilla.org/security/advisories/mfsa2025-04/
	https://www.mozilla.org/security/advisories/mfsa2025-05/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 134

Mozilla	Firefox ESR	Version: unspecified < 128.6
Mozilla	Thunderbird	Version: unspecified < 134
Mozilla	Thunderbird	Version: unspecified < 128.6

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "LOCAL",
                     availabilityImpact: "NONE",
                     baseScore: 4,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "NONE",
                     integrityImpact: "LOW",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2025-0239",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-01-08T16:33:42.534195Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-295",
                        description: "CWE-295 Improper Certificate Validation",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-01-08T16:36:07.964Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Firefox",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "134",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "128.6",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "134",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "128.6",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Paul Gerste",
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
                  },
               ],
               value: "When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Alt-Svc ALPN validation failure when redirected",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-13T21:54:59.320Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1929156",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-01/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-02/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-04/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-05/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2025-0239",
      datePublished: "2025-01-07T16:07:06.317Z",
      dateReserved: "2025-01-06T14:49:04.597Z",
      dateUpdated: "2025-01-13T21:54:59.320Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-0242

Vulnerability from cvelistv5

Published

2025-01-07 16:07

Modified

2025-01-13 21:55

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Summary

Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Firefox ESR < 115.19, Thunderbird < 134, and Thunderbird < 128.6.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1874523%2C1926454%2C1931873%2C1932169
	https://www.mozilla.org/security/advisories/mfsa2025-01/
	https://www.mozilla.org/security/advisories/mfsa2025-02/
	https://www.mozilla.org/security/advisories/mfsa2025-03/
	https://www.mozilla.org/security/advisories/mfsa2025-04/
	https://www.mozilla.org/security/advisories/mfsa2025-05/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 134

Mozilla	Firefox ESR	Version: unspecified < 128.6
Mozilla	Firefox ESR	Version: unspecified < 115.19
Mozilla	Thunderbird	Version: unspecified < 134
Mozilla	Thunderbird	Version: unspecified < 128.6

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "NONE",
                     baseScore: 6.5,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "LOW",
                     integrityImpact: "LOW",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2025-0242",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-01-08T16:40:52.756753Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-787",
                        description: "CWE-787 Out-of-bounds Write",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-01-08T16:44:09.089Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Firefox",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "134",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "128.6",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "115.19",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "134",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "128.6",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Andrew McCreight, Tooru Fujisawa, and the Mozilla Fuzzing Team",
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Firefox ESR < 115.19, Thunderbird < 134, and Thunderbird < 128.6.",
                  },
               ],
               value: "Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Firefox ESR < 115.19, Thunderbird < 134, and Thunderbird < 128.6.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-13T21:55:00.579Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               name: "Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6",
               url: "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1874523%2C1926454%2C1931873%2C1932169",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-01/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-02/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-03/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-04/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-05/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2025-0242",
      datePublished: "2025-01-07T16:07:07.093Z",
      dateReserved: "2025-01-06T14:49:11.467Z",
      dateUpdated: "2025-01-13T21:55:00.579Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-0240

Vulnerability from cvelistv5

Published

2025-01-07 16:07

Modified

2025-02-04 13:58

Severity ?

4.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Summary

Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1929623
	https://www.mozilla.org/security/advisories/mfsa2025-01/
	https://www.mozilla.org/security/advisories/mfsa2025-02/
	https://www.mozilla.org/security/advisories/mfsa2025-04/
	https://www.mozilla.org/security/advisories/mfsa2025-05/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 134

Mozilla	Firefox ESR	Version: unspecified < 128.6
Mozilla	Thunderbird	Version: unspecified < 134
Mozilla	Thunderbird	Version: unspecified < 128.6

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "LOCAL",
                     availabilityImpact: "NONE",
                     baseScore: 4,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "NONE",
                     integrityImpact: "LOW",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2025-0240",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-01-08T16:36:55.988099Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-416",
                        description: "CWE-416 Use After Free",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-01-08T16:39:33.123Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Firefox",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "134",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Firefox ESR",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "128.6",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "134",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Thunderbird",
               vendor: "Mozilla",
               versions: [
                  {
                     lessThan: "128.6",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Nils Bars",
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
                  },
               ],
               value: "Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Compartment mismatch when parsing JavaScript JSON module",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-04T13:58:50.664Z",
            orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
            shortName: "mozilla",
         },
         references: [
            {
               url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1929623",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-01/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-02/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-04/",
            },
            {
               url: "https://www.mozilla.org/security/advisories/mfsa2025-05/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
      assignerShortName: "mozilla",
      cveId: "CVE-2025-0240",
      datePublished: "2025-01-07T16:07:06.551Z",
      dateReserved: "2025-01-06T14:49:06.842Z",
      dateUpdated: "2025-02-04T13:58:50.664Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

cve-2025-0241

Vulnerability from cvelistv5

cve-2025-0237

Vulnerability from cvelistv5

cve-2025-0238

Vulnerability from cvelistv5

cve-2025-0243

Vulnerability from cvelistv5

cve-2025-0239

Vulnerability from cvelistv5

cve-2025-0242

Vulnerability from cvelistv5

cve-2025-0240

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature