p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de mozillafirefox

Vulnérabilités publiées pour mozillafirefox au cours des 30 derniers jours : 2. Présentes dans le catalogue KEV : 0.

RSS ↗ JSON ↗
Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 12

  1. SUSE-SU-2026:4834-1

    Non évaluéeCorrectif disponible

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. - CVE-2026-109706: Use-after-free in the Storage: IndexedDB component. - CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component. - CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component. - CVE-2026-109709: Information disclosure

    mozillafirefoxSystèmes d’exploitation
    • Mettez à jour vers 153.5.0-150400.157.16.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  2. SUSE-SU-2026:4545-1

    Non évaluéeCorrectif disponible

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929): - CVE-2026-96869: Information disclosure in the Networking component. - CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component. - CVE-2026-100757: Use-after-free in the Widget component. - CVE-2026-100758: Sandbox escape in the DOM: Navigation component. - CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component. - CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component. - CVE-2026-100762: Sandbox escape due to use-after-free

    mozillafirefoxSystèmes d’exploitation
    • Mettez à jour vers 153.4.0-150400.157.11.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  3. SUSE-SU-2026:4264-1

    Non évaluéeCorrectif disponible

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.3.0 ESRi (MFSA 2026-93, bsc#1280371) - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. - CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. - CVE-2026-92007: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. - CVE-2026-92008: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. - CVE-2026-92009: Privilege escalation due to incorrect boundary conditions in th

    mozillafirefoxSystèmes d’exploitation
    • Mettez à jour vers 153.3.0-150400.157.8.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  4. SUSE-SU-2026:4156-1

    Non évaluéeCorrectif disponible

    Security update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen

    This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.2.0 ESR * Fixed: Various security fixes. MFSA 2026-85 (bsc#1278001): * CVE-2026-75874: Sandbox escape in the Remote Settings Client component * CVE-2026-84118: Use-after-free in the JavaScript: GC component * CVE-2026-84119: Sandbox escape due to use-after-free in the DOM: Navigation component * CVE-2026-84120: Use-after-free in the Audio/Video component * CVE-2026-84121: Sandbox escape due to use-after-free in the DOM: Security

    mozillafirefoxSystèmes d’exploitation
    • Mettez à jour vers 153.2.0-150400.157.5.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  5. SUSE-SU-2026:3658-1

    Non évaluéeCorrectif disponible

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-74 (bsc#1274867) - CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component. - CVE-2026-74935: Privilege escalation in the DOM: Networking component. - CVE-2026-74936: Use-after-free in the JavaScript: WebAssembly component. - CVE-2026-74937: Use-after-free in the JavaScript: GC component. - CVE-2026-74938: Mitigation bypass in the JavaScript: GC component. - CVE-2026-74939: Privilege escalation in the DOM: Navigation component. - CVE-2026-74940: Use-after-free in the Graphics: Te

    mozillafirefoxSystèmes d’exploitation
    • Mettez à jour vers 140.14.0-150200.152.251.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  6. SUSE-SU-2026:3221-1

    Non évaluéeCorrectif disponible

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issue: - Firefox Extended Support Release 140.13.0 ESR (MFSA 2026-70, bsc#1271649): - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component. - CVE-2026-15719: Site isolation issue in the DOM: Navigation component. - CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component. - CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb component. - CVE-2026-16351: Sandbox escape due to use-after-free in the DOM: Navigation component. - CVE-2026-16352: Sandbox escape due to use-after-free in the Disability Access APIs component. - CVE-2026-16353

    mozillafirefoxSystèmes d’exploitation
    • Mettez à jour vers 140.13.0-150200.152.248.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  7. SUSE-SU-2026:2814-1

    Non évaluéeCorrectif disponible

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Removed obsolete mozilla-nss-certs and recommends p11-kit-nss-trust (bsc#1269226) Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071): - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component. - CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12. - CVE-2026-12291: Use-after-free in the Networking: HTTP component. - CVE-2026-12292: Incorrect boundary conditions in the Web Audio component. - CVE-2026-12294: Sandbox escape in the DOM: Workers component. - CVE-2026-12295: Sandbox escape in the DOM: Navigation component. - CVE-2026-12296: Sandbox e

    mozillafirefoxSystèmes d’exploitation
    • Mettez à jour vers 140.12.0-150200.152.245.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  8. SUSE-SU-2026:1322-1

    Non évaluéeCorrectif disponible

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Update to 149.0.2 and 140.9.1esr (bsc#1261663). - CVE-2026-5731: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2. - CVE-2026-5732: Incorrect boundary conditions, integer overflow in the Graphics: Text component. - CVE-2026-5734: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2.

    mozillafirefoxSystèmes d’exploitation
    • Mettez à jour vers 140.9.1-150200.152.228.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  9. SUSE-SU-2026:1126-1

    Non évaluéeCorrectif disponible

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox 140.9.0 ESR (MFSA 2026-22, bsc#1260083): - CVE-2026-4684: Race condition, use-after-free in the Graphics: WebRender component - CVE-2026-4685: Incorrect boundary conditions in the Graphics: Canvas2D component - CVE-2026-4686: Incorrect boundary conditions in the Graphics: Canvas2D component - CVE-2026-4687: Sandbox escape due to incorrect boundary conditions in the Telemetry component - CVE-2026-4688: Sandbox escape due to use-after-free in the Disability Access APIs component - CVE-2026-4689: Sandbox escape due to incorrect boundary conditions, integer

    mozillafirefoxSystèmes d’exploitation
    • Mettez à jour vers 140.9.0-150200.152.225.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  10. SUSE-SU-2026:0871-1

    Non évaluéeCorrectif disponible

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.8.0 ESR (MFSA 2026-15) (bsc#1258568): - CVE-2026-2757: Incorrect boundary conditions in the WebRTC: Audio/Video component - CVE-2026-2758: Use-after-free in the JavaScript: GC component - CVE-2026-2759: Incorrect boundary conditions in the Graphics: ImageLib component - CVE-2026-2760: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component - CVE-2026-2761: Sandbox escape in the Graphics: WebRender component - CVE-2026-2762: Integer overflow in the JavaScript: Standard Library component - CVE-2026-2763:

    mozillafirefoxSystèmes d’exploitation
    • Mettez à jour vers 140.8.0-150200.152.222.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  12. SUSE-SU-2026:0260-1

    Non évaluéeCorrectif disponible

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.7.0 ESR (bsc#1256340). - MFSA 2026-03 * CVE-2026-0877: Mitigation bypass in the DOM: Security component * CVE-2026-0878: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component * CVE-2026-0879: Sandbox escape due to incorrect boundary conditions in the Graphics component * CVE-2026-0880: Sandbox escape due to integer overflow in the Graphics component * CVE-2026-0882: Use-after-free in the IPC component * CVE-2025-14327: Spoofing issue in the Downloads Panel component * CVE-2026-0883:

    mozillafirefoxSystèmes d’exploitation
    • Mettez à jour vers 140.7.0-150200.152.216.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →