Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
14a3befb by security tracker role at 2026-10-29T07:13:01+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,281 @@
+CVE-2026-96741 (The DSGVO All in one for WP plugin for WordPress is vulnerable
to Stor ...)
+ TODO: check
+CVE-2026-96669 (The Food Store \u2013 Online Food Delivery & Pickup plugin for
WordPre ...)
+ TODO: check
+CVE-2026-96666 (The Schema App Structured Data plugin for WordPress is
vulnerable to S ...)
+ TODO: check
+CVE-2026-96228 (SSL Wireless SMS Notification for WordPress is vulnerable to
Authentic ...)
+ TODO: check
+CVE-2026-93904 (The Social Web Suite \u2013 Social Media Auto Post, Social
Media Auto ...)
+ TODO: check
+CVE-2026-93855 (The SendPress Newsletters plugin for WordPress is vulnerable
to time-b ...)
+ TODO: check
+CVE-2026-93851 (Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x
<= 11.7 ...)
+ TODO: check
+CVE-2026-93757 (The Wild Apricot Login plugin for WordPress is vulnerable to
Authentic ...)
+ TODO: check
+CVE-2026-93293 (The Password Protected plugin for WordPress is vulnerable to
Stored Cr ...)
+ TODO: check
+CVE-2026-89216 (The vTables WordPress plugin before 0.3 does not properly
sanitise an ...)
+ TODO: check
+CVE-2026-88928 (The PAYCOMET for WooCommerce WordPress plugin before 5.46 does
not ver ...)
+ TODO: check
+CVE-2026-86983 (A remote attacker may be able to terminate a process that
passes attac ...)
+ TODO: check
+CVE-2026-86794 (The Community Events WordPress plugin before 1.6.0 does not
have autho ...)
+ TODO: check
+CVE-2026-85749 (MailWatch for MailScanner is a web-based front-end to
MailScanner. Pri ...)
+ TODO: check
+CVE-2026-85007 (The Video Player for YouTube WordPress plugin before 2.1.4
does not p ...)
+ TODO: check
+CVE-2026-82411 (Open Object provides an API and admin interface to manage
objects and ...)
+ TODO: check
+CVE-2026-78674 (The BPMN System REST APIs do not sufficiently validate input
parameter ...)
+ TODO: check
+CVE-2026-78396 (The Link Library WordPress plugin before 7.10.0 does not
verify that a ...)
+ TODO: check
+CVE-2026-78395 (The Link Library WordPress plugin before 7.10.0 does not
re-check the ...)
+ TODO: check
+CVE-2026-76418 (A vulnerability in the Remote Access SSL VPN service of Cisco
Secure F ...)
+ TODO: check
+CVE-2026-75520 (Domoticz is a free, open source home automation system for
Linux, Wind ...)
+ TODO: check
+CVE-2026-6647 (In deployments of WSO2 Identity Server configured with a
case-insensit ...)
+ TODO: check
+CVE-2026-66092 (In openEQUELLA before 2026.2, the pre-login notice is stored
as HTML a ...)
+ TODO: check
+CVE-2026-66091 (In openEQUELLA before 2026.1, the GET
/api/userquery/userinfobackup en ...)
+ TODO: check
+CVE-2026-66090 (In openEQUELLA before 2026.1, the XML parser used for item
metadata do ...)
+ TODO: check
+CVE-2026-66089 (In openEQUELLA before 2026.1, the SOAP API parses XML supplied
in the ...)
+ TODO: check
+CVE-2026-66088 (In openEQUELLA before 2026.1, the system.execute() function
available ...)
+ TODO: check
+CVE-2026-63190 (FearlessCMS is a flat-file `content` management system
centered on sim ...)
+ TODO: check
+CVE-2026-61575 (AVideo is a video-sharing Platform. Prior to 8.1.0,
`view/queue.php` u ...)
+ TODO: check
+CVE-2026-61573 (AVideo is a video-sharing Platform. Prior to 8.1.0, the
anonymous logi ...)
+ TODO: check
+CVE-2026-61572 (AVideo is a video-sharing Platform. Before the initial
remediation att ...)
+ TODO: check
+CVE-2026-61571 (AVideo is a video-sharing Platform. Prior to 8.1.0, the
encoder lacks ...)
+ TODO: check
+CVE-2026-61569 (AVideo is a video-sharing Platform. Prior to 8.1.0, the
unauthenticate ...)
+ TODO: check
+CVE-2026-61567 (AVideo is a video-sharing Platform. Prior to 8.1.0, the
live-streaming ...)
+ TODO: check
+CVE-2026-61564 (AVideo is a video-sharing Platform. Prior to 8.1.0, the
unauthenticate ...)
+ TODO: check
+CVE-2026-61546 (AnkiMCP is an Anki addon that implements an MCP server,
enabling AI as ...)
+ TODO: check
+CVE-2026-61542 (Gearboy is a Game Boy, Game Boy Color, and Super Game Boy
emulator and ...)
+ TODO: check
+CVE-2026-61529 (Endatix is a self-hosted form and survey management platform
with a he ...)
+ TODO: check
+CVE-2026-57448 (Blombooru is a self-hosted personal booru for organizing and
tagging p ...)
+ TODO: check
+CVE-2026-55561 (InvoicePlane is a self-hosted open source application for
managing inv ...)
+ TODO: check
+CVE-2026-54455 (OpenCATS is an open-source applicant tracking system and
recruitment C ...)
+ TODO: check
+CVE-2026-54453 (OpenCATS is an open-source applicant tracking system and
recruitment C ...)
+ TODO: check
+CVE-2026-54162 (Ember is a real-time terminal dashboard for Caddy servers with
Franken ...)
+ TODO: check
+CVE-2026-42949 (A authorization bypass vulnerability exists in the
/api/runscript func ...)
+ TODO: check
+CVE-2026-42922 (A authorization bypass vulnerability exists in the /nodered
functional ...)
+ TODO: check
+CVE-2026-40063 (A information disclosure vulnerability exists in the
/nodered/fuxa/scr ...)
+ TODO: check
+CVE-2026-3583 (When the `allowed_scopes` configuration is enabled, the OAuth2
token i ...)
+ TODO: check
+CVE-2026-21157 (Improper input validation in Bixby prior to version 4.0.85.6
allows pr ...)
+ TODO: check
+CVE-2026-19610 (A flaw was found in the platform-mbean component of JBoss EAP,
which p ...)
+ TODO: check
+CVE-2026-16889 (In openEQUELLA before 2026.1, the pre-login notice image
upload endpoi ...)
+ TODO: check
+CVE-2026-15564 (Wildfly's IIOP listener may permit deserialization of input
streams be ...)
+ TODO: check
+CVE-2026-13451 (A flaw was found in KServe. A namespace-scoped user with
create/update ...)
+ TODO: check
+CVE-2026-11854 (The authentication endpoint generates an error message that
includes r ...)
+ TODO: check
+CVE-2026-118905 (Node Version Manager (nvm) is a POSIX-compliant shell
function for man ...)
+ TODO: check
+CVE-2026-118804 (Bricks Builder 2.4.3 and before contains a broken access
control vulne ...)
+ TODO: check
+CVE-2026-118803 (Bricks Theme 2.4.3 and before contains an unauthenticated
dynamic-data ...)
+ TODO: check
+CVE-2026-118757 (PiWeb Disable payment method / Partial payment for
WooCommerce before ...)
+ TODO: check
+CVE-2026-118756 (gopass before 1.17.0 contains a path traversal vulnerability
in the fi ...)
+ TODO: check
+CVE-2026-118755 (Volmarg Personal Management System through 2.1.0 contains an
OS comman ...)
+ TODO: check
+CVE-2026-118754 (Dolibarr ERP CRM before 24.0.2 contains a missing
authorization vulner ...)
+ TODO: check
+CVE-2026-118753 (FreeImage (danoli3 fork) before 3.19.25 contains a heap
buffer overflo ...)
+ TODO: check
+CVE-2026-118752 (FreeImage (danoli3 fork) before 3.19.22 contains a heap
buffer overflo ...)
+ TODO: check
+CVE-2026-118694 (python-markdown2 through 2.5.5 contains a denial of service
vulnerabil ...)
+ TODO: check
+CVE-2026-118693 (CherryTree through 1.7.2 contains a path traversal
vulnerability in Ct ...)
+ TODO: check
+CVE-2026-118692 (CherryTree through 1.7.2 contains an OS command injection
vulnerabilit ...)
+ TODO: check
+CVE-2026-118691 (xianyu-auto-reply-fix through 2.0.7 contains a missing
authorization v ...)
+ TODO: check
+CVE-2026-118690 (Signal K Server before 2.33.0 contains a missing
authentication vulner ...)
+ TODO: check
+CVE-2026-118689 (OvenMediaEngine through 0.21.0 contains a denial of service
vulnerabil ...)
+ TODO: check
+CVE-2026-118682 (KaringX ClashMi through 1.0.32.1801 disables TLS certificate
validatio ...)
+ TODO: check
+CVE-2026-118669 (OAuthLib is an implementation of the OAuth request-signing
logic for P ...)
+ TODO: check
+CVE-2026-118668 (langgraph-api implements the LangGraph API for rapid
development and t ...)
+ TODO: check
+CVE-2026-118667 (LangGraph Python SDK is used to connect to running LangGraph
API serve ...)
+ TODO: check
+CVE-2026-118666 (GraphQL Tools provides utilities for building, stitching, and
mocking ...)
+ TODO: check
+CVE-2026-118665 (GraphQL Tools provides utilities for building, stitching, and
mocking ...)
+ TODO: check
+CVE-2026-118664 (decode-uri-component provides a more robust alternative to
decodeURICo ...)
+ TODO: check
+CVE-2026-118663 (@hono/node-server allows running the Hono application on
Node.js. From ...)
+ TODO: check
+CVE-2026-118662 (Vite is a frontend tooling framework for JavaScript. From
6.4.4 until ...)
+ TODO: check
+CVE-2026-118661 (Happy DOM is a JavaScript implementation of a web browser
without its ...)
+ TODO: check
+CVE-2026-118660 (Happy DOM is a JavaScript implementation of a web browser
without its ...)
+ TODO: check
+CVE-2026-118659 (Happy DOM is a JavaScript implementation of a web browser
without its ...)
+ TODO: check
+CVE-2026-118658 (Echo is a Go web framework. Prior to 4.15.2 and 5.1.1,
Context.Scheme ...)
+ TODO: check
+CVE-2026-118657 (Echo is a Go web framework. Prior to 4.16.0 and 5.4.0,
Context.Scheme ...)
+ TODO: check
+CVE-2026-118656 (Echo is a Go web framework. Prior to 4.16.0 and 5.4.0,
sanitizeURI che ...)
+ TODO: check
+CVE-2026-118655 (Echo is a Go web framework. Prior to 4.15.3 and 5.2.0,
middleware.Stat ...)
+ TODO: check
+CVE-2026-118654 (Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's
static f ...)
+ TODO: check
+CVE-2026-118653 (Echo is a Go web framework. From 4.0.0 until 5.1.0,
Context.RealIP fal ...)
+ TODO: check
+CVE-2026-118652 (Echo is a Go web framework. Prior to 4.16.0 and 5.4.0,
Context.JSONP a ...)
+ TODO: check
+CVE-2026-118651 (Echo is a Go web framework. From 4.0.0 until 5.4.0, the Proxy
middlewa ...)
+ TODO: check
+CVE-2026-118650 (Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, a
globally moun ...)
+ TODO: check
+CVE-2026-118590 (A security vulnerability has been detected in nipy nibabel up
to 5.4.2 ...)
+ TODO: check
+CVE-2026-118589 (A weakness has been identified in nschloe meshio up to 5.3.5.
Impacted ...)
+ TODO: check
+CVE-2026-118586 (A security flaw has been discovered in dfm feedfinder2 up to
0.0.4. Th ...)
+ TODO: check
+CVE-2026-118585 (A vulnerability was identified in configuroweb
inventariobasico c9377c ...)
+ TODO: check
+CVE-2026-118579 (A weakness has been identified in D-Link DIR-505 1.10B02. The
impacted ...)
+ TODO: check
+CVE-2026-118578 (A security flaw has been discovered in maotoumao
MusicFreeDesktop 0.0. ...)
+ TODO: check
+CVE-2026-118577 (A vulnerability was identified in maotoumao MusicFreeDesktop
0.0.6/0.0 ...)
+ TODO: check
+CVE-2026-118538 (A vulnerability was determined in a2ui-project a2ui up to
0.12.0. This ...)
+ TODO: check
+CVE-2026-118537 (A vulnerability was found in a2ui up to 0.10.4. This
vulnerability aff ...)
+ TODO: check
+CVE-2026-118426 (In affected versions of Octopus Server with the LDAP
authentication pr ...)
+ TODO: check
+CVE-2026-118266 (Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's
MethodOv ...)
+ TODO: check
+CVE-2026-118030 (A flaw was found in the HOTP authentication mechanism of the
keycloak- ...)
+ TODO: check
+CVE-2026-117859 (A flaw was found in the Pushed Authorization Request PAR
implementatio ...)
+ TODO: check
+CVE-2026-117688 (A flaw was found in the client registration component of
Keycloak, an ...)
+ TODO: check
+CVE-2026-117627 (A flaw was found in the JWT Authorization Grant
implementation of the ...)
+ TODO: check
+CVE-2026-117574 (A flaw was found in ai-gateway-payload-processing. An
authenticated re ...)
+ TODO: check
+CVE-2026-117548 (A NULL pointer dereference flaw was found in 389-ds-base.
This flaw oc ...)
+ TODO: check
+CVE-2026-116641 (The DB Tools rely on the TLS implementation in Golang\u2019s
standard ...)
+ TODO: check
+CVE-2026-115415 (Improper neutralization of input used for LLM prompting in
the environ ...)
+ TODO: check
+CVE-2026-115302 (The Contact Form by Supsystic WordPress plugin before 1.11.1
does not ...)
+ TODO: check
+CVE-2026-115301 (The Contact Form by Supsystic WordPress plugin before 1.11.1
does not ...)
+ TODO: check
+CVE-2026-115300 (The Contact Form by Supsystic WordPress plugin before 1.11.1
does not ...)
+ TODO: check
+CVE-2026-115299 (The Contact Form by Supsystic WordPress plugin before 1.11.1
does not ...)
+ TODO: check
+CVE-2026-115282 (The Recipe Card Blocks Lite WordPress plugin before 3.6.4
does not per ...)
+ TODO: check
+CVE-2026-115259 (The Photo Engine (Media Organizer & Lightroom) WordPress
plugin before ...)
+ TODO: check
+CVE-2026-115245 (The Chat AI with Dispatcher WordPress plugin before 2.4 does
not prope ...)
+ TODO: check
+CVE-2026-114488 (A flaw was found in Wildfly. A remote attacker can bypass
authenticati ...)
+ TODO: check
+CVE-2026-114270 (The GeoDirectory WordPress plugin before 2.8.197 does not
honour post ...)
+ TODO: check
+CVE-2026-114173 (The Ortto plugin for WordPress before 1.0.25 did not filter
the WooCom ...)
+ TODO: check
+CVE-2026-113957 (An attacker who controls the registry, a mirror, or the
network path t ...)
+ TODO: check
+CVE-2026-113617 (The Automated Import Products to Cart WordPress plugin before
1.0.4 do ...)
+ TODO: check
+CVE-2026-113616 (The LogixFast Auth WordPress plugin before 1.0.4 does not
deliver its ...)
+ TODO: check
+CVE-2026-113409 (The Ortto plugin for WordPress before 1.0.25 did not escape
stored set ...)
+ TODO: check
+CVE-2026-113387 (The Ortto plugin for WordPress before 1.0.25 did not
authenticate conf ...)
+ TODO: check
+CVE-2026-111739 (The Two Factor Authentication WordPress plugin before 1.17.0,
All-In-O ...)
+ TODO: check
+CVE-2026-111575
+ REJECTED
+CVE-2026-111486
+ REJECTED
+CVE-2026-111478
+ REJECTED
+CVE-2026-110983 (The WP Photo Album Plus WordPress plugin before 9.3.04.004
does not ve ...)
+ TODO: check
+CVE-2026-110505 (The Enable SVG, WebP, and ICO Upload WordPress plugin before
1.1.6 doe ...)
+ TODO: check
+CVE-2026-110504 (The Enable SVG, WebP, and ICO Upload WordPress plugin before
1.1.6 doe ...)
+ TODO: check
+CVE-2026-110030 (The Hide Price Until Login WordPress plugin before 1.1.2 does
not rest ...)
+ TODO: check
+CVE-2026-109516 (The Bot for Telegram on WooCommerce plugin for WordPress is
vulnerable ...)
+ TODO: check
+CVE-2026-108763 (The Wallet System for WooCommerce WordPress plugin before
2.8.2 does ...)
+ TODO: check
+CVE-2026-108686 (The WP Post Author WordPress plugin before 4.2.0 does not
restrict th ...)
+ TODO: check
+CVE-2026-108685 (The WP Post Author WordPress plugin before 4.2.0 does not
check that ...)
+ TODO: check
+CVE-2026-105258 (The Appointment Booking Plugin WordPress plugin before 5.7.6
does not ...)
+ TODO: check
+CVE-2026-103693 (The Frontend Dashboard WordPress plugin before 3.0.5,
ProfileGrid Wor ...)
+ TODO: check
+CVE-2025-14260 (Due to the improper implementation of access control rules,
the WSO2 p ...)
+ TODO: check
+CVE-2024-3586 (The LetterPress WordPress plugin before 2.4.0 does not
sanitise and e ...)
+ TODO: check
CVE-2026-XXXX [GHSA-cp82-q55r-936c]
- amule 1:3.2.0-1
NOTE:
https://github.com/amule-org/amule/security/advisories/GHSA-cp82-q55r-936c
@@ -1662,118 +1940,170 @@ CVE-2026-118370 (libexpat through 2.9.0 contains a
signed integer overflow vulne
- expat <unfixed> (bug #1152337)
NOTE: https://github.com/libexpat/libexpat/pull/1450
CVE-2026-118359 (Memory corruption in V8 in Google Chrome prior to
156.0.8078.73 allowe ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118358 (Memory corruption in WebAudio in Google Chrome prior to
156.0.8078.73 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118357 (Use after free in FileSystem in Google Chrome prior to
156.0.8078.73 a ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118356 (Use after free in WTF in Google Chrome prior to 156.0.8078.73
allowed ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118355 (Improper input validation in Command in Google Chrome prior
to 156.0.8 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118354 (Improper input validation in Skia in Google Chrome prior to
156.0.8078 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118353 (Use after free in Paint in Google Chrome prior to
156.0.8078.73 allowe ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118352 (Memory corruption in Cache in Google Chrome prior to
156.0.8078.73 all ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118351 (Memory corruption in Skia in Google Chrome prior to
156.0.8078.73 allo ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118350 (Use after free in Turbolev in Google Chrome prior to
156.0.8078.73 all ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118349 (Memory corruption in Payments in Google Chrome prior to
156.0.8078.73 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118348 (Improper input validation in Skia in Google Chrome prior to
156.0.8078 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118347 (Use after free in FileSystem in Google Chrome prior to
156.0.8078.73 a ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118346 (Use after free in Compositing in Google Chrome prior to
156.0.8078.73 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118345 (Use after free in PDFium in Google Chrome prior to
156.0.8078.73 allow ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118344 (Use after free in Layout in Google Chrome prior to
156.0.8078.73 allow ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118343 (Improper input validation in ReadingList in Google Chrome
prior to 156 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118342 (Out of bounds write in Editing in Google Chrome prior to
156.0.8078.73 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118341 (Use after free in Modularization in Google Chrome prior to
156.0.8078. ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118340 (Memory corruption in Skia in Google Chrome prior to
156.0.8078.73 allo ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118339 (Use after free in Animation in Google Chrome prior to
156.0.8078.73 al ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118338 (Use after free in Animation in Google Chrome prior to
156.0.8078.73 al ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118337 (Improper access control in Forms in Google Chrome prior to
156.0.8078. ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118336 (Improper input validation in Headless in Google Chrome prior
to 156.0. ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118335 (Improper input validation in Metrics in Google Chrome on on
Mac prior ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118334 (Use after free in ImageCapture in Google Chrome prior to
156.0.8078.73 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118333 (Missing authorization in Video in Google Chrome prior to
156.0.8078.73 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118332 (Improper input validation in Compositing in Google Chrome
prior to 156 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118331 (Improper input validation in FileAPI in Google Chrome prior
to 156.0.8 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118330 (Use after free in Browser in Google Chrome on on Windows
prior to 156. ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118329 (Improper input validation in ANGLE in Google Chrome on on Mac
prior to ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118328 (Improper input validation in WebRTC in Google Chrome prior to
156.0.80 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118327 (Memory corruption in Media in Google Chrome prior to
156.0.8078.73 all ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118322 (Memory corruption in ANGLE in Google Chrome prior to
156.0.8078.73 all ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118321 (Improper input validation in Core in Google Chrome on on
Android prior ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118320 (Memory corruption in V8 in Google Chrome prior to
156.0.8078.73 allowe ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118319 (Memory corruption in Skia in Google Chrome prior to
156.0.8078.73 allo ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118318 (Improper access control in V8 in Google Chrome prior to
156.0.8078.73 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118317 (Memory corruption in HTML in Google Chrome prior to
156.0.8078.73 allo ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118316 (Improper input validation in V8 in Google Chrome prior to
156.0.8078.7 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118315 (Improper input validation in SVG in Google Chrome prior to
156.0.8078. ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118314 (Improper input validation in UI in Google Chrome on on
Android prior t ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118313 (Use after free in Video in Google Chrome prior to
156.0.8078.73 allowe ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118312 (Memory corruption in Paint in Google Chrome prior to
156.0.8078.73 all ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118311 (Memory corruption in Media in Google Chrome prior to
156.0.8078.73 all ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118310 (Improper input validation in Views in Google Chrome on on
Windows prio ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118309 (Improper input validation in UI in Google Chrome on on
Android prior t ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118308 (Use after free in SVG in Google Chrome prior to 156.0.8078.73
allowed ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118307 (Use after free in Paint in Google Chrome prior to
156.0.8078.73 allowe ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118306 (Memory corruption in FileSystem in Google Chrome prior to
156.0.8078.7 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118305 (Memory corruption in Turbolev in Google Chrome prior to
156.0.8078.73 ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118304 (Improper input validation in SVG in Google Chrome prior to
156.0.8078. ...)
+ {DSA-6592-1}
- chromium 156.0.8078.73-1
CVE-2026-118276 (A vulnerability was determined in a2ui-project a2ui up to
0.10.6. This ...)
NOT-FOR-US: a2ui-project a2ui
@@ -2463,6 +2793,7 @@ CVE-2026-118005 (Use-after-free in the WebRTC: Signaling
component. This vulnera
- firefox 159.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118005
CVE-2026-118004 (Incorrect boundary conditions in the CSS Transitions and
Animations co ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2470,6 +2801,7 @@ CVE-2026-118004 (Incorrect boundary conditions in the CSS
Transitions and Animat
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118004
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118004
CVE-2026-118003 (Information disclosure in the Networking: DNS component. This
vulnerab ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2477,6 +2809,7 @@ CVE-2026-118003 (Information disclosure in the
Networking: DNS component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118003
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118003
CVE-2026-118002 (Information disclosure due to race condition in the
Networking compone ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2484,6 +2817,7 @@ CVE-2026-118002 (Information disclosure due to race
condition in the Networking
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118002
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118002
CVE-2026-118000 (Information disclosure in the Networking: HTTP component.
This vulnera ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2491,6 +2825,7 @@ CVE-2026-118000 (Information disclosure in the
Networking: HTTP component. This
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118000
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118000
CVE-2026-117999 (Race condition in the IPC component. This vulnerability was
fixed in F ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2498,6 +2833,7 @@ CVE-2026-117999 (Race condition in the IPC component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117999
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117999
CVE-2026-117998 (Mitigation bypass in the DOM: Push Subscriptions component.
This vulne ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2505,6 +2841,7 @@ CVE-2026-117998 (Mitigation bypass in the DOM: Push
Subscriptions component. Thi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117998
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117998
CVE-2026-117997 (Sandbox escape due to use-after-free in the Widget component.
This vul ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2512,6 +2849,7 @@ CVE-2026-117997 (Sandbox escape due to use-after-free in
the Widget component. T
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117997
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117997
CVE-2026-117996 (Incorrect boundary conditions in the WebRTC component. This
vulnerabil ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2519,6 +2857,7 @@ CVE-2026-117996 (Incorrect boundary conditions in the
WebRTC component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117996
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117996
CVE-2026-117995 (Privilege escalation in the DOM: UI Events & Focus Handling
component. ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2526,6 +2865,7 @@ CVE-2026-117995 (Privilege escalation in the DOM: UI
Events & Focus Handling com
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117995
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117995
CVE-2026-117994 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2533,6 +2873,7 @@ CVE-2026-117994 (Use-after-free in the JavaScript: GC
component. This vulnerabil
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117994
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117994
CVE-2026-117993 (Integer overflow in the Graphics: Text component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2540,6 +2881,7 @@ CVE-2026-117993 (Integer overflow in the Graphics: Text
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117993
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117993
CVE-2026-117992 (Information disclosure in the CSS Parsing and Computation
component. T ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2547,6 +2889,7 @@ CVE-2026-117992 (Information disclosure in the CSS
Parsing and Computation compo
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117992
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117992
CVE-2026-117991 (Incorrect boundary conditions in the Layout: Text and Fonts
component. ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2554,6 +2897,7 @@ CVE-2026-117991 (Incorrect boundary conditions in the
Layout: Text and Fonts com
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117991
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117991
CVE-2026-117990 (Sandbox escape due to incorrect boundary conditions in the
Graphics: W ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2561,6 +2905,7 @@ CVE-2026-117990 (Sandbox escape due to incorrect boundary
conditions in the Grap
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117990
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117990
CVE-2026-117989 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2568,6 +2913,7 @@ CVE-2026-117989 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117989
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117989
CVE-2026-117988 (Sandbox escape due to incorrect boundary conditions in the
Graphics: C ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2575,6 +2921,7 @@ CVE-2026-117988 (Sandbox escape due to incorrect boundary
conditions in the Grap
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117988
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117988
CVE-2026-117987 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2582,6 +2929,7 @@ CVE-2026-117987 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117987
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117987
CVE-2026-117986 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2589,6 +2937,7 @@ CVE-2026-117986 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117986
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117986
CVE-2026-117985 (Sandbox escape due to use-after-free in the Graphics
component. This v ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2596,6 +2945,7 @@ CVE-2026-117985 (Sandbox escape due to use-after-free in
the Graphics component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117985
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117985
CVE-2026-117984 (Incorrect boundary conditions in the Layout: Scrolling and
Overflow co ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2603,6 +2953,7 @@ CVE-2026-117984 (Incorrect boundary conditions in the
Layout: Scrolling and Over
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117984
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117984
CVE-2026-117983 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2610,6 +2961,7 @@ CVE-2026-117983 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117983
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117983
CVE-2026-117982 (Invalid pointer in the JavaScript Engine: JIT component. This
vulnerab ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2617,6 +2969,7 @@ CVE-2026-117982 (Invalid pointer in the JavaScript
Engine: JIT component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117982
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117982
CVE-2026-117981 (Privilege escalation in the Toolkit component. This
vulnerability was ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2624,6 +2977,7 @@ CVE-2026-117981 (Privilege escalation in the Toolkit
component. This vulnerabili
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117981
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117981
CVE-2026-117980 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2631,6 +2985,7 @@ CVE-2026-117980 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117980
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117980
CVE-2026-117979 (Incorrect boundary conditions in the Graphics: WebRender
component. Th ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2638,6 +2993,7 @@ CVE-2026-117979 (Incorrect boundary conditions in the
Graphics: WebRender compon
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117979
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117979
CVE-2026-117978 (Incorrect boundary conditions in the Graphics component. This
vulnerab ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2645,6 +3001,7 @@ CVE-2026-117978 (Incorrect boundary conditions in the
Graphics component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117978
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117978
CVE-2026-117977 (Other issue in the Console component. This vulnerability was
fixed in ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2652,6 +3009,7 @@ CVE-2026-117977 (Other issue in the Console component.
This vulnerability was fi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117977
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117977
CVE-2026-117976 (Site isolation issue in the DOM: Navigation component. This
vulnerabil ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2659,6 +3017,7 @@ CVE-2026-117976 (Site isolation issue in the DOM:
Navigation component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117976
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117976
CVE-2026-117975 (Sandbox escape due to invalid pointer in the Graphics:
WebRender compo ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2666,6 +3025,7 @@ CVE-2026-117975 (Sandbox escape due to invalid pointer in
the Graphics: WebRende
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117975
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117975
CVE-2026-117974 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2673,6 +3033,7 @@ CVE-2026-117974 (Use-after-free in the XML component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117974
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117974
CVE-2026-117973 (Use-after-free in the Networking: DNS component. This
vulnerability wa ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2680,6 +3041,7 @@ CVE-2026-117973 (Use-after-free in the Networking: DNS
component. This vulnerabi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117973
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117973
CVE-2026-117972 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2687,6 +3049,7 @@ CVE-2026-117972 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117972
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117972
CVE-2026-117971 (Sandbox escape due to use-after-free in the Print Preview
component. T ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2694,6 +3057,7 @@ CVE-2026-117971 (Sandbox escape due to use-after-free in
the Print Preview compo
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117971
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117971
CVE-2026-117970 (Race condition in the Disability Access APIs component. This
vulnerabi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2701,6 +3065,7 @@ CVE-2026-117970 (Race condition in the Disability Access
APIs component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117970
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117970
CVE-2026-117969 (Invalid pointer in the JavaScript Engine: JIT component. This
vulnerab ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2708,6 +3073,7 @@ CVE-2026-117969 (Invalid pointer in the JavaScript
Engine: JIT component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117969
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117969
CVE-2026-117968 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2715,6 +3081,7 @@ CVE-2026-117968 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117968
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117968
CVE-2026-117967 (Mitigation bypass in the DOM: Security component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2722,6 +3089,7 @@ CVE-2026-117967 (Mitigation bypass in the DOM: Security
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117967
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117967
CVE-2026-117966 (Site isolation issue in the Networking: HTTP component. This
vulnerabi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2729,6 +3097,7 @@ CVE-2026-117966 (Site isolation issue in the Networking:
HTTP component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117966
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117966
CVE-2026-117965 (Same-origin policy bypass in the Address Bar component. This
vulnerabi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2736,6 +3105,7 @@ CVE-2026-117965 (Same-origin policy bypass in the Address
Bar component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117965
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117965
CVE-2026-117964 (Use-after-free in the Panning and Zooming component. This
vulnerabilit ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2743,6 +3113,7 @@ CVE-2026-117964 (Use-after-free in the Panning and
Zooming component. This vulne
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117964
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117964
CVE-2026-117963 (Incorrect boundary conditions in the DOM: Service Workers
component. T ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2750,6 +3121,7 @@ CVE-2026-117963 (Incorrect boundary conditions in the
DOM: Service Workers compo
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117963
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117963
CVE-2026-117962 (Sandbox escape due to incorrect boundary conditions in the
Storage: Qu ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2757,6 +3129,7 @@ CVE-2026-117962 (Sandbox escape due to incorrect boundary
conditions in the Stor
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117962
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117962
CVE-2026-117961 (Incorrect boundary conditions in the Layout: Text and Fonts
component. ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2764,6 +3137,7 @@ CVE-2026-117961 (Incorrect boundary conditions in the
Layout: Text and Fonts com
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117961
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117961
CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2771,6 +3145,7 @@ CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117960
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117960
CVE-2026-117959 (Site isolation issue in the DOM: Service Workers component.
This vulne ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2778,6 +3153,7 @@ CVE-2026-117959 (Site isolation issue in the DOM: Service
Workers component. Thi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117959
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117959
CVE-2026-117958 (Site isolation issue in the Networking: HTTP component. This
vulnerabi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2785,6 +3161,7 @@ CVE-2026-117958 (Site isolation issue in the Networking:
HTTP component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117958
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117958
CVE-2026-117957 (Cryptographic issue in the WebRTC: Networking component. This
vulnerab ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2792,6 +3169,7 @@ CVE-2026-117957 (Cryptographic issue in the WebRTC:
Networking component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117957
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117957
CVE-2026-117956 (Invalid pointer in the Nimbus Desktop Client component. This
vulnerabi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2799,6 +3177,7 @@ CVE-2026-117956 (Invalid pointer in the Nimbus Desktop
Client component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117956
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117956
CVE-2026-117955 (JIT miscompilation in the JavaScript: WebAssembly component.
This vuln ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2806,6 +3185,7 @@ CVE-2026-117955 (JIT miscompilation in the JavaScript:
WebAssembly component. Th
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117955
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117955
CVE-2026-117954 (Use-after-free in the Layout: Positioned component. This
vulnerability ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2813,6 +3193,7 @@ CVE-2026-117954 (Use-after-free in the Layout: Positioned
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117954
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117954
CVE-2026-117953 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2820,6 +3201,7 @@ CVE-2026-117953 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117953
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117953
CVE-2026-117952 (Uninitialized memory in the Networking component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2827,6 +3209,7 @@ CVE-2026-117952 (Uninitialized memory in the Networking
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117952
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117952
CVE-2026-117951 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2834,6 +3217,7 @@ CVE-2026-117951 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117951
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117951
CVE-2026-117950 (Incorrect boundary conditions in the DOM: Core & HTML
component. This ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2841,6 +3225,7 @@ CVE-2026-117950 (Incorrect boundary conditions in the
DOM: Core & HTML component
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117950
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117950
CVE-2026-117949 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2848,6 +3233,7 @@ CVE-2026-117949 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117949
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117949
CVE-2026-117948 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2855,6 +3241,7 @@ CVE-2026-117948 (Use-after-free in the SVG component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117948
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117948
CVE-2026-117947 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2862,6 +3249,7 @@ CVE-2026-117947 (Use-after-free in the XML component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117947
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117947
CVE-2026-117946 (Incorrect boundary conditions in the JavaScript Engine
component. This ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2869,6 +3257,7 @@ CVE-2026-117946 (Incorrect boundary conditions in the
JavaScript Engine componen
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117946
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117946
CVE-2026-117945 (Incorrect boundary conditions in the XML component. This
vulnerability ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2876,6 +3265,7 @@ CVE-2026-117945 (Incorrect boundary conditions in the XML
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117945
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117945
CVE-2026-117944 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2883,6 +3273,7 @@ CVE-2026-117944 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117944
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117944
CVE-2026-117943 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2890,6 +3281,7 @@ CVE-2026-117943 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117943
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117943
CVE-2026-117942 (Incorrect boundary conditions in the JavaScript Engine: JIT
component. ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2897,6 +3289,7 @@ CVE-2026-117942 (Incorrect boundary conditions in the
JavaScript Engine: JIT com
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117942
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117942
CVE-2026-117941 (Use-after-free in the DOM: CSS Object Model component. This
vulnerabil ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2904,6 +3297,7 @@ CVE-2026-117941 (Use-after-free in the DOM: CSS Object
Model component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117941
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117941
CVE-2026-117940 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2911,6 +3305,7 @@ CVE-2026-117940 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117940
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117940
CVE-2026-117939 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2918,6 +3313,7 @@ CVE-2026-117939 (Use-after-free in the XML component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117939
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117939
CVE-2026-117938 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2925,6 +3321,7 @@ CVE-2026-117938 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117938
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117938
CVE-2026-117937 (Invalid pointer in the JavaScript Engine component. This
vulnerability ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2932,6 +3329,7 @@ CVE-2026-117937 (Invalid pointer in the JavaScript Engine
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117937
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117937
CVE-2026-117936 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2939,6 +3337,7 @@ CVE-2026-117936 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117936
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117936
CVE-2026-117935 (Use-after-free in the DOM: Bindings (WebIDL) component. This
vulnerabi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2946,6 +3345,7 @@ CVE-2026-117935 (Use-after-free in the DOM: Bindings
(WebIDL) component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117935
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117935
CVE-2026-117934 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2953,6 +3353,7 @@ CVE-2026-117934 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117934
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117934
CVE-2026-117933 (Frame poisoning in the CSS Parsing and Computation component.
This vul ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2960,6 +3361,7 @@ CVE-2026-117933 (Frame poisoning in the CSS Parsing and
Computation component. T
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117933
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117933
CVE-2026-117932 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2967,6 +3369,7 @@ CVE-2026-117932 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117932
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117932
CVE-2026-117931 (Use-after-free in the DOM: Events component. This
vulnerability was fi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2974,6 +3377,7 @@ CVE-2026-117931 (Use-after-free in the DOM: Events
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117931
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117931
CVE-2026-117930 (Use-after-free in the DOM: Bindings (WebIDL) component. This
vulnerabi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2981,6 +3385,7 @@ CVE-2026-117930 (Use-after-free in the DOM: Bindings
(WebIDL) component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117930
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117930
CVE-2026-117929 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2988,6 +3393,7 @@ CVE-2026-117929 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117929
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117929
CVE-2026-117928 (Same-origin policy bypass in the CSS Parsing and Computation
component ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -2995,6 +3401,7 @@ CVE-2026-117928 (Same-origin policy bypass in the CSS
Parsing and Computation co
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117928
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117928
CVE-2026-117927 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3002,6 +3409,7 @@ CVE-2026-117927 (Use-after-free in the SVG component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117927
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117927
CVE-2026-117926 (Incorrect boundary conditions in the SVG component. This
vulnerability ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3009,6 +3417,7 @@ CVE-2026-117926 (Incorrect boundary conditions in the SVG
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117926
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117926
CVE-2026-117925 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3016,6 +3425,7 @@ CVE-2026-117925 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117925
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117925
CVE-2026-117924 (Use-after-free in the XSLT component. This vulnerability was
fixed in ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3023,6 +3433,7 @@ CVE-2026-117924 (Use-after-free in the XSLT component.
This vulnerability was fi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117924
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117924
CVE-2026-117923 (Use-after-free in the Audio/Video component. This
vulnerability was fi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3030,6 +3441,7 @@ CVE-2026-117923 (Use-after-free in the Audio/Video
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117923
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117923
CVE-2026-117922 (Use-after-free in the Networking: WebSockets component. This
vulnerabi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3037,6 +3449,7 @@ CVE-2026-117922 (Use-after-free in the Networking:
WebSockets component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117922
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117922
CVE-2026-117921 (Use-after-free in the CSS Parsing and Computation component.
This vuln ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3044,6 +3457,7 @@ CVE-2026-117921 (Use-after-free in the CSS Parsing and
Computation component. Th
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117921
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117921
CVE-2026-117920 (Use-after-free in the DOM: HTML Parser component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3051,6 +3465,7 @@ CVE-2026-117920 (Use-after-free in the DOM: HTML Parser
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117920
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117920
CVE-2026-117919 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3058,6 +3473,7 @@ CVE-2026-117919 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117919
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117919
CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D component. This
vulnerability ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3065,6 +3481,7 @@ CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117918
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117918
CVE-2026-117917 (Invalid pointer in the Graphics: WebRender component. This
vulnerabili ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3072,6 +3489,7 @@ CVE-2026-117917 (Invalid pointer in the Graphics:
WebRender component. This vuln
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117917
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117917
CVE-2026-117916 (Use-after-free in the XSLT component. This vulnerability was
fixed in ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3079,6 +3497,7 @@ CVE-2026-117916 (Use-after-free in the XSLT component.
This vulnerability was fi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117916
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117916
CVE-2026-117915 (Incorrect boundary conditions in the Layout: Block and Inline
componen ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3086,6 +3505,7 @@ CVE-2026-117915 (Incorrect boundary conditions in the
Layout: Block and Inline c
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117915
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117915
CVE-2026-117914 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3093,6 +3513,7 @@ CVE-2026-117914 (Use-after-free in the SVG component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117914
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117914
CVE-2026-117913 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3100,6 +3521,7 @@ CVE-2026-117913 (Use-after-free in the SVG component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117913
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117913
CVE-2026-117912 (Same-origin policy bypass in the CSS Parsing and Computation
component ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3107,6 +3529,7 @@ CVE-2026-117912 (Same-origin policy bypass in the CSS
Parsing and Computation co
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117912
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117912
CVE-2026-117911 (Use-after-free in the Audio/Video: Playback component. This
vulnerabil ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3114,6 +3537,7 @@ CVE-2026-117911 (Use-after-free in the Audio/Video:
Playback component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117911
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117911
CVE-2026-117910 (Invalid pointer in the JavaScript Engine component. This
vulnerability ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3121,6 +3545,7 @@ CVE-2026-117910 (Invalid pointer in the JavaScript Engine
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117910
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117910
CVE-2026-117909 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3128,6 +3553,7 @@ CVE-2026-117909 (Use-after-free in the JavaScript: GC
component. This vulnerabil
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117909
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117909
CVE-2026-117908 (Use-after-free in the Graphics: ImageLib component. This
vulnerability ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3135,6 +3561,7 @@ CVE-2026-117908 (Use-after-free in the Graphics: ImageLib
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117908
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117908
CVE-2026-117907 (Use-after-free in the Networking component. This
vulnerability was fix ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3142,6 +3569,7 @@ CVE-2026-117907 (Use-after-free in the Networking
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117907
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117907
CVE-2026-117906 (Use-after-free in the CSS Parsing and Computation component.
This vuln ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3149,6 +3577,7 @@ CVE-2026-117906 (Use-after-free in the CSS Parsing and
Computation component. Th
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117906
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117906
CVE-2026-117905 (Use-after-free in the Audio/Video: Playback component. This
vulnerabil ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3156,6 +3585,7 @@ CVE-2026-117905 (Use-after-free in the Audio/Video:
Playback component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117905
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117905
CVE-2026-117904 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3163,6 +3593,7 @@ CVE-2026-117904 (Use-after-free in the JavaScript: GC
component. This vulnerabil
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117904
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117904
CVE-2026-117903 (Use-after-free in the Audio/Video component. This
vulnerability was fi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3170,6 +3601,7 @@ CVE-2026-117903 (Use-after-free in the Audio/Video
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117903
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117903
CVE-2026-117902 (Use-after-free in the Layout: Text and Fonts component. This
vulnerabi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3177,6 +3609,7 @@ CVE-2026-117902 (Use-after-free in the Layout: Text and
Fonts component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117902
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117902
CVE-2026-117901 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3184,6 +3617,7 @@ CVE-2026-117901 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117901
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117901
CVE-2026-117900 (Use-after-free in the DOM: Editor component. This
vulnerability was fi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3191,6 +3625,7 @@ CVE-2026-117900 (Use-after-free in the DOM: Editor
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117900
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117900
CVE-2026-117899 (Use-after-free in the Networking: HTTP component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3198,6 +3633,7 @@ CVE-2026-117899 (Use-after-free in the Networking: HTTP
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117899
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117899
CVE-2026-117898 (Use-after-free in the JavaScript Engine: JIT component. This
vulnerabi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3205,6 +3641,7 @@ CVE-2026-117898 (Use-after-free in the JavaScript Engine:
JIT component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117898
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117898
CVE-2026-117897 (Incorrect boundary conditions in the Layout: Tables
component. This vu ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3212,6 +3649,7 @@ CVE-2026-117897 (Incorrect boundary conditions in the
Layout: Tables component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117897
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117897
CVE-2026-117896 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3219,6 +3657,7 @@ CVE-2026-117896 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117896
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117896
CVE-2026-117895 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3226,6 +3665,7 @@ CVE-2026-117895 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117895
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117895
CVE-2026-117894 (Incorrect boundary conditions in the WebRTC: Signaling
component. This ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3233,6 +3673,7 @@ CVE-2026-117894 (Incorrect boundary conditions in the
WebRTC: Signaling componen
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117894
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117894
CVE-2026-117893 (Incorrect boundary conditions in the Security: PSM component.
This vul ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3240,6 +3681,7 @@ CVE-2026-117893 (Incorrect boundary conditions in the
Security: PSM component. T
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117893
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117893
CVE-2026-117892 (Privilege escalation due to use-after-free in the WebRTC:
Networking c ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3247,6 +3689,7 @@ CVE-2026-117892 (Privilege escalation due to
use-after-free in the WebRTC: Netwo
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117892
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117892
CVE-2026-117891 (Use-after-free in the JavaScript Engine: JIT component. This
vulnerabi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3254,6 +3697,7 @@ CVE-2026-117891 (Use-after-free in the JavaScript Engine:
JIT component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117891
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117891
CVE-2026-117890 (JIT miscompilation in the JavaScript Engine: JIT component.
This vulne ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3261,6 +3705,7 @@ CVE-2026-117890 (JIT miscompilation in the JavaScript
Engine: JIT component. Thi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117890
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117890
CVE-2026-117889 (Incorrect boundary conditions in the JavaScript Engine
component. This ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3268,6 +3713,7 @@ CVE-2026-117889 (Incorrect boundary conditions in the
JavaScript Engine componen
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117889
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117889
CVE-2026-117888 (Uninitialized memory in the Graphics: Canvas2D component.
This vulnera ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3275,6 +3721,7 @@ CVE-2026-117888 (Uninitialized memory in the Graphics:
Canvas2D component. This
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117888
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117888
CVE-2026-117887 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3282,6 +3729,7 @@ CVE-2026-117887 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117887
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117887
CVE-2026-117886 (Incorrect boundary conditions in the Graphics: Text
component. This vu ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3289,6 +3737,7 @@ CVE-2026-117886 (Incorrect boundary conditions in the
Graphics: Text component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117886
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117886
CVE-2026-117885 (Use-after-free in the Layout: Grid component. This
vulnerability was f ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3296,6 +3745,7 @@ CVE-2026-117885 (Use-after-free in the Layout: Grid
component. This vulnerabilit
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117885
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117885
CVE-2026-117884 (Use-after-free in the Networking component. This
vulnerability was fix ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3303,6 +3753,7 @@ CVE-2026-117884 (Use-after-free in the Networking
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117884
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117884
CVE-2026-117883 (Use-after-free in the DOM: HTML Parser component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3310,6 +3761,7 @@ CVE-2026-117883 (Use-after-free in the DOM: HTML Parser
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117883
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117883
CVE-2026-117882 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3317,6 +3769,7 @@ CVE-2026-117882 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117882
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117882
CVE-2026-117881 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3324,6 +3777,7 @@ CVE-2026-117881 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117881
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117881
CVE-2026-117880 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3331,6 +3785,7 @@ CVE-2026-117880 (Use-after-free in the XML component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117880
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117880
CVE-2026-117879 (Incorrect boundary conditions in the Layout: Tables
component. This vu ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3338,6 +3793,7 @@ CVE-2026-117879 (Incorrect boundary conditions in the
Layout: Tables component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117879
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117879
CVE-2026-117878 (Other issue, use-after-free in the Storage: IndexedDB
component. This ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3345,6 +3801,7 @@ CVE-2026-117878 (Other issue, use-after-free in the
Storage: IndexedDB component
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117878
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117878
CVE-2026-117877 (Use-after-free in the Layout: Text and Fonts component. This
vulnerabi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3352,6 +3809,7 @@ CVE-2026-117877 (Use-after-free in the Layout: Text and
Fonts component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117877
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117877
CVE-2026-117876 (Use-after-free in the Layout: Text and Fonts component. This
vulnerabi ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3359,6 +3817,7 @@ CVE-2026-117876 (Use-after-free in the Layout: Text and
Fonts component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117876
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117876
CVE-2026-117875 (Use-after-free in the Layout: Scrolling and Overflow
component. This v ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3366,6 +3825,7 @@ CVE-2026-117875 (Use-after-free in the Layout: Scrolling
and Overflow component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117875
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117875
CVE-2026-117874 (Use-after-free in the Internationalization component. This
vulnerabili ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3373,6 +3833,7 @@ CVE-2026-117874 (Use-after-free in the
Internationalization component. This vuln
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117874
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117874
CVE-2026-117873 (Incorrect boundary conditions in the Audio/Video: Playback
component. ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3380,6 +3841,7 @@ CVE-2026-117873 (Incorrect boundary conditions in the
Audio/Video: Playback comp
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117873
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117873
CVE-2026-117872 (Use-after-free in the JavaScript: Standard Library component.
This vul ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3387,6 +3849,7 @@ CVE-2026-117872 (Use-after-free in the JavaScript:
Standard Library component. T
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117872
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117872
CVE-2026-117871 (Invalid pointer in the Graphics component. This vulnerability
was fixe ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3394,6 +3857,7 @@ CVE-2026-117871 (Invalid pointer in the Graphics
component. This vulnerability w
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117871
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117871
CVE-2026-117870 (Use-after-free in the JavaScript Engine component. This
vulnerability ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3401,6 +3865,7 @@ CVE-2026-117870 (Use-after-free in the JavaScript Engine
component. This vulnera
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117870
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117870
CVE-2026-117869 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3408,6 +3873,7 @@ CVE-2026-117869 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117869
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117869
CVE-2026-117868 (Sandbox escape in the DOM: Networking component. This
vulnerability wa ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3415,6 +3881,7 @@ CVE-2026-117868 (Sandbox escape in the DOM: Networking
component. This vulnerabi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117868
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117868
CVE-2026-117867 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3422,6 +3889,7 @@ CVE-2026-117867 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117867
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117867
CVE-2026-117866 (Privilege escalation due to use-after-free in the Graphics:
Canvas2D c ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3429,6 +3897,7 @@ CVE-2026-117866 (Privilege escalation due to
use-after-free in the Graphics: Can
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117866
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117866
CVE-2026-117865 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3436,6 +3905,7 @@ CVE-2026-117865 (Use-after-free in the JavaScript: GC
component. This vulnerabil
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117865
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117865
CVE-2026-117864 (Sandbox escape in the Form Manager component. This
vulnerability was f ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3443,6 +3913,7 @@ CVE-2026-117864 (Sandbox escape in the Form Manager
component. This vulnerabilit
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117864
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117864
CVE-2026-117863 (Information disclosure due to uninitialized memory in the
Audio/Video ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3450,6 +3921,7 @@ CVE-2026-117863 (Information disclosure due to
uninitialized memory in the Audio
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117863
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117863
CVE-2026-117862 (Privilege escalation due to incorrect boundary conditions in
the Netwo ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3457,6 +3929,7 @@ CVE-2026-117862 (Privilege escalation due to incorrect
boundary conditions in th
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117862
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117862
CVE-2026-117861 (Sandbox escape in the DOM: Navigation component. This
vulnerability wa ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -3464,6 +3937,7 @@ CVE-2026-117861 (Sandbox escape in the DOM: Navigation
component. This vulnerabi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117861
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117861
CVE-2026-117860 (Same-origin policy bypass in the DOM: Navigation component.
This vulne ...)
+ {DSA-6590-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5531,7 +6005,7 @@ CVE-2026-112346 (OpenHands Software Agent SDK before
1.52.0 contains an unauthen
NOT-FOR-US: OpenHands Software Agent SDK
CVE-2026-112345 (TTLock Android application before v9.8.260718 and associated
smart-loc ...)
NOT-FOR-US: TTLock Android
-CVE-2026-112344 (Syncplify Server! before 8.8.0 contains a path traversal
vulnerability ...)
+CVE-2026-112344 (Syncplify Server! 6.0.0 before 8.8.0 contains a path
traversal vulnera ...)
NOT-FOR-US: Syncplify Server!
CVE-2026-112343 (Syncplify Server! before 8.8.0 contains an access control
bypass vulne ...)
NOT-FOR-US: Syncplify Server!
@@ -6926,7 +7400,7 @@ CVE-2026-115889 (Wasmtime is a runtime for WebAssembly.
Prior to 36.0.19 and 43.
NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0380.html
NOTE: https://github.com/advisories/GHSA-897f-g5gm-fmxm
NOTE: https://github.com/bytecodealliance/wasmtime/pull/12613
-CVE-2026-109411
+CVE-2026-109411 (An access control bypass flaw was found in Samba's
vfs_ceph_rgw module ...)
- samba 2:4.25.1+dfsg-1
[trixie] - samba <not-affected> (Vulnerable code not present)
[bookworm] - samba <not-affected> (Vulnerable code not present)
@@ -8909,7 +9383,7 @@ CVE-2026-92183 (GIMP APNG File Parsing Stack-based Buffer
Overflow Remote Code E
- gimp 3.2.6-1
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/e4b0d6bc389df4b9b439a3f4e1155e4de965869e
(GIMP_3_2_6)
CVE-2026-91403 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1}
+ {DSA-6591-1 DSA-6588-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10360,7 +10834,7 @@ CVE-2026-91489 (Vulnerability in the Oracle Identity
Manager Connector product o
CVE-2026-91488 (Vulnerability in the Oracle Identity Manager Connector product
of Orac ...)
NOT-FOR-US: Oracle
CVE-2026-91487 (Vulnerability in Oracle Java SE (component: Compiler).
Supported vers ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10408,7 +10882,7 @@ CVE-2026-91466 (Vulnerability in the PeopleSoft
Enterprise FIN Common Objects Ar
CVE-2026-91465 (Vulnerability in the PeopleSoft Enterprise FIN Common Objects
Argentin ...)
NOT-FOR-US: Oracle
CVE-2026-91464 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10417,7 +10891,7 @@ CVE-2026-91464 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91463 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10426,7 +10900,7 @@ CVE-2026-91463 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91462 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10435,7 +10909,7 @@ CVE-2026-91462 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91461 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10454,7 +10928,7 @@ CVE-2026-91457 (Vulnerability in the Oracle Outside In
Technology product of Ora
CVE-2026-91455 (Vulnerability in the JD Edwards EnterpriseOne Tools product of
Oracle ...)
NOT-FOR-US: Oracle
CVE-2026-91453 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10463,7 +10937,7 @@ CVE-2026-91453 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91452 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10472,7 +10946,7 @@ CVE-2026-91452 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91451 (Vulnerability in Oracle Java SE (component: Networking).
Supported ve ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10543,7 +11017,7 @@ CVE-2026-91420 (Vulnerability in the Siebel CRM
Deployment product of Oracle Sie
CVE-2026-91419 (Vulnerability in the Oracle HTTP Server product of Oracle
Fusion Middl ...)
NOT-FOR-US: Oracle
CVE-2026-91418 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle
GraalVM for ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10555,7 +11029,7 @@ CVE-2026-91417 (Vulnerability in the Oracle Java SE,
Oracle GraalVM Enterprise E
- openjdk-8 <unfixed> (bug #1151673)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91415 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10577,7 +11051,7 @@ CVE-2026-91411 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-21 21.0.13+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91410 (Vulnerability in Oracle Java SE (component: Libraries).
Supported ver ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10603,7 +11077,7 @@ CVE-2026-91402 (Vulnerability in the Oracle Java SE,
Oracle JavaFX, Oracle Graal
[bookworm] - openjfx <not-affected> (Vulnerable code not present, only
affects 21 and later)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10614,7 +11088,7 @@ CVE-2026-91400 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
CVE-2026-91399 (Vulnerability in the Primavera P6 Enterprise Project Portfolio
Managem ...)
NOT-FOR-US: Oracle
CVE-2026-91398 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10623,7 +11097,7 @@ CVE-2026-91398 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91397 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10640,7 +11114,7 @@ CVE-2026-91395 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-11 <unfixed> (bug #1152388)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91394 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK
product of ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -10683,7 +11157,7 @@ CVE-2026-91381 (Vulnerability in the Oracle Java SE,
Oracle GraalVM Enterprise E
- openjdk-8 <unfixed> (bug #1151673)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10692,7 +11166,7 @@ CVE-2026-91380 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91379 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10707,7 +11181,7 @@ CVE-2026-91377 (Vulnerability in the Siebel CRM
Integration product of Oracle Si
CVE-2026-91376 (Vulnerability in the Primavera P6 Enterprise Project Portfolio
Managem ...)
NOT-FOR-US: Oracle
CVE-2026-91375 (Vulnerability in Oracle Java SE (component: Libraries).
Supported ver ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10716,7 +11190,7 @@ CVE-2026-91375 (Vulnerability in Oracle Java SE
(component: Libraries). Support
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10725,7 +11199,7 @@ CVE-2026-91374 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91373 (Vulnerability in Oracle Java SE (component: JSSE). Supported
versions ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10808,7 +11282,7 @@ CVE-2026-91337 (Vulnerability in the iProcurement
product of Oracle E-Business S
CVE-2026-91336 (Vulnerability in the Oracle Solaris product of Oracle Systems
(compone ...)
NOT-FOR-US: Oracle
CVE-2026-91335 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10817,7 +11291,7 @@ CVE-2026-91335 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91334 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -10826,13 +11300,13 @@ CVE-2026-91334 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91333 (Vulnerability in Oracle Java SE (component: Security).
Supported vers ...)
- {DSA-6588-1}
+ {DSA-6591-1 DSA-6588-1}
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91332 (Vulnerability in Oracle Java SE (component: Networking).
Supported ve ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -11201,7 +11675,7 @@ CVE-2026-87370 (Vulnerability in the Oracle WebCenter
Content product of Oracle
CVE-2026-87369 (Vulnerability in the Oracle Service Bus product of Oracle
Fusion Middl ...)
NOT-FOR-US: Oracle
CVE-2026-87367 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -11352,7 +11826,7 @@ CVE-2026-87296 (Vulnerability in the Oracle Access
Manager product of Oracle Fus
CVE-2026-87295 (Vulnerability in the Oracle HRMS (India) product of Oracle
E-Business ...)
NOT-FOR-US: Oracle
CVE-2026-87294 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -11364,7 +11838,7 @@ CVE-2026-87293 (Vulnerability in Oracle Java SE
(component: RMI). Supported ver
- openjdk-8 <unfixed> (bug #1151673)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87292 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -11373,13 +11847,13 @@ CVE-2026-87292 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87291 (Vulnerability in Oracle Java SE (component: Networking).
Supported ve ...)
- {DSA-6588-1}
+ {DSA-6591-1 DSA-6588-1}
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87290 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -11390,6 +11864,7 @@ CVE-2026-87290 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
CVE-2026-87263 (Vulnerability in the Oracle Business Intelligence Enterprise
Edition p ...)
NOT-FOR-US: Oracle
CVE-2026-87255 (Vulnerability in Oracle Java SE (component: Compiler).
Supported vers ...)
+ {DSA-6591-1}
- openjdk-25 25.0.5+8-1
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
@@ -11418,7 +11893,7 @@ CVE-2026-83402 (Vulnerability in the Oracle Identity
Manager product of Oracle F
CVE-2026-83401 (Vulnerability in the Oracle Identity Manager product of Oracle
Fusion ...)
NOT-FOR-US: Oracle
CVE-2026-83400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -11435,7 +11910,7 @@ CVE-2026-83397 (Vulnerability in the Oracle Data
Integrator product of Oracle Fu
CVE-2026-83396 (Vulnerability in the Oracle Data Integrator product of Oracle
Fusion M ...)
NOT-FOR-US: Oracle
CVE-2026-83395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -11458,7 +11933,7 @@ CVE-2026-83389 (Vulnerability in the Oracle HRMS (UK)
product of Oracle E-Busine
CVE-2026-83388 (Vulnerability in the Oracle Applications Manager product of
Oracle E-B ...)
NOT-FOR-US: Oracle
CVE-2026-83387 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -11477,7 +11952,7 @@ CVE-2026-83383 (Vulnerability in the Oracle HRMS (US)
product of Oracle E-Busine
CVE-2026-83382 (Vulnerability in the Oracle Report Manager product of Oracle
E-Busines ...)
NOT-FOR-US: Oracle
CVE-2026-83381 (Vulnerability in Oracle Java SE (component: Security).
Supported vers ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -11486,7 +11961,7 @@ CVE-2026-83381 (Vulnerability in Oracle Java SE
(component: Security). Supporte
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -11497,7 +11972,7 @@ CVE-2026-83380 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
CVE-2026-83379 (Vulnerability in the Oracle Weblogic Server Proxy Plug-in
product of O ...)
NOT-FOR-US: Oracle
CVE-2026-83378 (Vulnerability in Oracle Java SE (component: Compiler).
Supported vers ...)
- {DSA-6588-1}
+ {DSA-6591-1 DSA-6588-1}
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
- openjdk-27 27.0.1+9-1
@@ -11505,7 +11980,7 @@ CVE-2026-83378 (Vulnerability in Oracle Java SE
(component: Compiler). Supporte
CVE-2026-83377 (Vulnerability in the Oracle HRMS (US) product of Oracle
E-Business Sui ...)
NOT-FOR-US: Oracle
CVE-2026-83376 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -11516,7 +11991,7 @@ CVE-2026-83376 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
CVE-2026-83375 (Vulnerability in the PeopleSoft Enterprise HCM Human Resources
product ...)
NOT-FOR-US: Oracle
CVE-2026-83374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1 DLA-4861-1}
+ {DSA-6591-1 DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -12725,7 +13200,7 @@ CVE-2026-101518 (Vulnerability in the Oracle Enterprise
Manager Base Platform pr
CVE-2026-101517 (Vulnerability in the Oracle Utilities Network Management
System produc ...)
NOT-FOR-US: Oracle
CVE-2026-101516 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DSA-6588-1}
+ {DSA-6591-1 DSA-6588-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed> (bug #1152388)
- openjdk-17 17.0.21+9-1
@@ -40888,7 +41363,8 @@ CVE-2025-31980 (HCL BigFix Service Management is
affected by an Improper Input V
NOT-FOR-US: HCL
CVE-2024-58388 (Sharp (and Toshiba Tec rebranded) multifunction printers
contain an un ...)
NOT-FOR-US: Sharp printers
-CVE-2023-54404 (Zod schema-validation library contains an uncontrolled
resource consum ...)
+CVE-2023-54404
+ REJECTED
NOT-FOR-US: Zod
CVE-2026-42356 (Deployment of wrong handler vulnerability in Apache HTTP
Server allows ...)
{DSA-6569-1}
@@ -45505,7 +45981,7 @@ CVE-2026-100800 (Sandbox escape due to use-after-free
in the Disability Access A
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100800
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100800
CVE-2026-100801 (Privilege escalation in the DLL Services component. This
vulnerability ...)
- {DSA-6536-1 DSA-6533-1 DLA-4814-1 DLA-4810-1}
+ {DSA-6590-1 DSA-6536-1 DSA-6533-1 DLA-4814-1 DLA-4810-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/14a3befb2360e2cfd7168cf94f099a8e114bcadc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/14a3befb2360e2cfd7168cf94f099a8e114bcadc
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
