Most recent entries from all

ALSA-2026:58897 — Important: firefox security update

Affected: AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983) * firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934) * firefox: thunderbird: Privilege escalation in the Networking: Cookies component (CVE-2026-74953) * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74987) * firefox: thunderbird: Information disclosure in the Graphics component (CVE-2026-74948) * firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-74943) * firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component (CVE-2026-74971) * firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component (CVE-2026-74941) * firefox: Privilege escalation in the Shell Integration component (CVE-2026-74965) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-74946) * firefox: Race condition, use-after-free in the Graphics component (CVE-2026-74973) * firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-74949) * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.…

certfr-2026-avi-1054 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta…

certfr-2026-avi-1054

EUVD-2026-355404

fkie_cve-2026-74964

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

GHSA-7p8c-3v22-58jp

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.

OESA-2026-3556 — firefox security update

Affected: openEuler:22.03-LTS-SP4: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo Security Fix(es):

Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.(CVE-2026-74934)

A privilege escalation vulnerability exists in Mozilla Firefox and Thunderbird in the DOM: Networking component. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. An attacker could exploit this vulnerability to affect confidentiality, integrity, and availability. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.(CVE-2026-74935)

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird…

openSUSE-SU-2026:11546-1 — firefox-esr-153.1.0-1.1 on GA media

firefox-esr-153.1.0-1.1 on GA media

RHSA-2026:64813 — Red Hat Security Advisory: firefox security update

firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component firefox: thunderbird: Privilege escalation in the DOM: Networking component firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component firefox: thunderbird: Privilege escalation in the DOM: Navigation component firefox: thunderbird: Use-after-free in the Graphics: Text component firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component firefox: Privilege escalation in the Remote Settings Client component firefox: thunderbird: Use-after-free in the Graphics: ImageLib component firefox: thunderbird: Use-after-free in the DOM: Core & HTML component firefox: thunderbird: Information disclosure in the Graphics: Text component firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component firefox: thunderbird: Information disclosure in the Graphics component firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component firefox: thunderbird: Privilege escalation in the Networking: Cookies component firefox: thunderbird: Mitigation bypass in the Safe Browsing component firefox: thunderbird: Mitigation bypass in the Storage: Cache API component firefox: thunderbird: Site isolation issue in the WebExtensions component firefox: Site isolation issue in the Networking: Cookies component firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component f…

RLSA-2026:58897 — Important: firefox security update

Affected: Rocky Linux:9: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983)

* firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934)

* firefox: thunderbird: Privilege escalation in the Networking: Cookies component (CVE-2026-74953)

* firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74987)

* firefox: thunderbird: Information disclosure in the Graphics component (CVE-2026-74948)

* firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-74943)

* firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component (CVE-2026-74971)

* firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component (CVE-2026-74941)

* firefox: Privilege escalation in the Shell Integration component (CVE-2026-74965)

* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-74946)

* firefox: Race condition, use-after-free in the Graphics component (CVE-2026-74973)

* firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-74949)

* firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 15…

SUSE-SU-2026:23304-1 — Security update for MozillaFirefox

Security update for MozillaFirefox

UBUNTU-CVE-2026-74964

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

WID-SEC-W-2026-2911 — Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Firefox ESR und Thunderbird ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Spoofing- oder Clickjacking-Angriffe durchzuführen oder Denial-of-Service-Zustände herbeizuführen.