CVE catalog

CVE-2021-29951

firefox-esr affected and fixed versions

[CVE catalog]

The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop the service. This could be used to prevent the browser update service from operating (if an attacker spammed the 'Stop' command); but also exposed attack surface in the maintenance service. *Note: This issue only affected Windows operating systems older than Win 10 build 1709. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 78.10.1, Firefox < 87, and Firefox ESR < 78.10.1.

Severity
Medium · CVSS 6.1CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.85% · Oct 27, 2026

Projects and upstream resources

Related catalog projects (63)

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securityfirefox-esr153.6.0esr-1~deb13u1Not affected[CVE-2021-29951]
Debiantrixie-securitythunderbird1:153.5.1esr-1~deb13u2Not affected[CVE-2021-29951]
Debiantrixiefirefox-esrNot reportedNot affectedDistribution reports not affected[CVE-2021-29951]
Debiantrixiefirefox-esr140.15.0esr-1~deb13u1Not affected[CVE-2021-29951]
DebiantrixiethunderbirdNot reportedNot affectedDistribution reports not affected[CVE-2021-29951]
Debiantrixiethunderbird1:140.12.0esr-1~deb13u1Not affected[CVE-2021-29951]
Debiansidfirefox-esrNot reportedNot affectedDistribution reports not affected[CVE-2021-29951]
Debiansidfirefox-esr153.6.0esr-1Not affected[CVE-2021-29951]
DebiansidthunderbirdNot reportedNot affectedDistribution reports not affected[CVE-2021-29951]
Debiansidthunderbird1:153.6.0esr-1Not affected[CVE-2021-29951]
Suseopenstack cloud crowbar 9MozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Suseopenstack cloud crowbar 8MozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]

Showing 12 observations. All 54 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedfirefox-esrNot reportedUnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedthunderbirdNot reportedUnknownSource applicability is not establishedProvider not reported
Debianbookwormfirefox-esrNot reportedNot affectedDistribution reports not affected[CVE-2021-29951]
Debianbookwormfirefox-esr140.12.0esr-1~deb12u1Not affected[CVE-2021-29951]
DebianbookwormthunderbirdNot reportedNot affectedDistribution reports not affected[CVE-2021-29951]
Debianbookwormthunderbird1:140.12.0esr-1~deb12u1Not affected[CVE-2021-29951]
Debianbookworm-securityfirefox-esr153.6.0esr-1~deb12u2Not affected[CVE-2021-29951]
Debianbookworm-securitythunderbird1:153.6.0esr-1~deb12u1Not affected[CVE-2021-29951]
Debianforkyfirefox-esrNot reportedNot affectedDistribution reports not affected[CVE-2021-29951]
Debianforkyfirefox-esr153.5.1esr-1Not affected[CVE-2021-29951]
DebianforkythunderbirdNot reportedNot affectedDistribution reports not affected[CVE-2021-29951]
Debianforkythunderbird1:153.5.0esr-1Not affected[CVE-2021-29951]
Debiansidfirefox-esrNot reportedNot affectedDistribution reports not affected[CVE-2021-29951]
Debiansidfirefox-esr153.6.0esr-1Not affected[CVE-2021-29951]
DebiansidthunderbirdNot reportedNot affectedDistribution reports not affected[CVE-2021-29951]
Debiansidthunderbird1:153.6.0esr-1Not affected[CVE-2021-29951]
Debiantrixiefirefox-esrNot reportedNot affectedDistribution reports not affected[CVE-2021-29951]
Debiantrixiefirefox-esr140.15.0esr-1~deb13u1Not affected[CVE-2021-29951]
DebiantrixiethunderbirdNot reportedNot affectedDistribution reports not affected[CVE-2021-29951]
Debiantrixiethunderbird1:140.12.0esr-1~deb13u1Not affected[CVE-2021-29951]
Debiantrixie-securityfirefox-esr153.6.0esr-1~deb13u1Not affected[CVE-2021-29951]
Debiantrixie-securitythunderbird1:153.5.1esr-1~deb13u2Not affected[CVE-2021-29951]
Opensuseleap 15.2MozillaFirefox78.11.0-lp152.2.58.1UnknownSource applicability is not established[OPENSUSE-SU-2021:0858-1]
Opensuseleap 15.3MozillaFirefox78.11.0-8.43.1UnknownSource applicability is not established[OPENSUSE-SU-2021:1884-1]
Suseenterprise storage 6MozillaFirefox78.11.0-3.144.1UnknownSource applicability is not established[SUSE-SU-2021:1919-1]
Susehpe helion openstack 8MozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Suselinux enterprise high performance computing 15 sp1-esposMozillaFirefox78.11.0-3.144.1UnknownSource applicability is not established[SUSE-SU-2021:1919-1]
Suselinux enterprise high performance computing 15 sp1-ltssMozillaFirefox78.11.0-3.144.1UnknownSource applicability is not established[SUSE-SU-2021:1919-1]
Suselinux enterprise high performance computing 15-esposMozillaFirefox78.11.0-3.144.1UnknownSource applicability is not established[SUSE-SU-2021:1919-1]
Suselinux enterprise high performance computing 15-ltssMozillaFirefox78.11.0-3.144.1UnknownSource applicability is not established[SUSE-SU-2021:1919-1]
Suselinux enterprise module for desktop applications 15 sp2MozillaFirefox78.11.0-8.43.1UnknownSource applicability is not established[SUSE-SU-2021:1884-1]
Suselinux enterprise module for desktop applications 15 sp3MozillaFirefox78.11.0-8.43.1UnknownSource applicability is not established[SUSE-SU-2021:1884-1]
Suselinux enterprise server 11 sp4-ltssMozillaFirefox78.11.0-78.131.1UnknownSource applicability is not established[SUSE-SU-2021:14743-1]
Suselinux enterprise server 12 sp2-bclMozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Suselinux enterprise server 12 sp3-bclMozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Suselinux enterprise server 12 sp3-ltssMozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Suselinux enterprise server 12 sp4-ltssMozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Suselinux enterprise server 12 sp5MozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Suselinux enterprise server 15 sp1-bclMozillaFirefox78.11.0-3.144.1UnknownSource applicability is not established[SUSE-SU-2021:1919-1]
Suselinux enterprise server 15 sp1-ltssMozillaFirefox78.11.0-3.144.1UnknownSource applicability is not established[SUSE-SU-2021:1919-1]
Suselinux enterprise server 15-ltssMozillaFirefox78.11.0-3.144.1UnknownSource applicability is not established[SUSE-SU-2021:1919-1]
Suselinux enterprise server for sap applications 12 sp3MozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Suselinux enterprise server for sap applications 12 sp4MozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Suselinux enterprise server for sap applications 12 sp5MozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Suselinux enterprise server for sap applications 15MozillaFirefox78.11.0-3.144.1UnknownSource applicability is not established[SUSE-SU-2021:1919-1]
Suselinux enterprise server for sap applications 15 sp1MozillaFirefox78.11.0-3.144.1UnknownSource applicability is not established[SUSE-SU-2021:1919-1]
Suselinux enterprise software development kit 12 sp5MozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Susemanager proxy 4.0MozillaFirefox78.11.0-3.144.1UnknownSource applicability is not established[SUSE-SU-2021:1919-1]
Susemanager retail branch server 4.0MozillaFirefox78.11.0-3.144.1UnknownSource applicability is not established[SUSE-SU-2021:1919-1]
Susemanager server 4.0MozillaFirefox78.11.0-3.144.1UnknownSource applicability is not established[SUSE-SU-2021:1919-1]
Suseopenstack cloud 8MozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Suseopenstack cloud 9MozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Suseopenstack cloud crowbar 8MozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Suseopenstack cloud crowbar 9MozillaFirefox78.11.0-112.62.1UnknownSource applicability is not established[SUSE-SU-2021:1886-1]
Original provider fields
{
  "package_releases": [
    {
      "name": "firefox-esr",
      "status": "not affected",
      "release": "sid",
      "version": "153.6.0esr-1"
    },
    {
      "name": "firefox-esr",
      "status": "not affected",
      "release": "forky",
      "version": "153.5.1esr-1"
    },
    {
      "name": "firefox-esr",
      "status": "not affected",
      "release": "trixie",
      "version": "140.15.0esr-1~deb13u1"
    },
    {
      "name": "firefox-esr",
      "status": "not affected",
      "release": "trixie-security",
      "version": "153.6.0esr-1~deb13u1"
    },
    {
      "name": "firefox-esr",
      "status": "not affected",
      "release": "bookworm",
      "version": "140.12.0esr-1~deb12u1"
    },
    {
      "name": "firefox-esr",
      "status": "not affected",
      "release": "bookworm-security",
      "version": "153.6.0esr-1~deb12u2"
    },
    {
      "name": "thunderbird",
      "status": "not affected",
      "release": "sid",
      "version": "1:153.6.0esr-1"
    },
    {
      "name": "thunderbird",
      "status": "not affected",
      "release": "forky",
      "version": "1:153.5.0esr-1"
    },
    {
      "name": "thunderbird",
      "status": "not affected",
      "release": "trixie",
      "version": "1:140.12.0esr-1~deb13u1"
    },
    {
      "name": "thunderbird",
      "status": "not affected",
      "release": "trixie-security",
      "version": "1:153.5.1esr-1~deb13u2"
    },
    {
      "name": "thunderbird",
      "status": "not affected",
      "release": "bookworm",
      "version": "1:140.12.0esr-1~deb12u1"
    },
    {
      "name": "thunderbird",
      "status": "not affected",
      "release": "bookworm-security",
      "version": "1:153.6.0esr-1~deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "firefox-esr",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "firefox-esr",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "firefox-esr",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "firefox-esr",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "thunderbird",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "thunderbird",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "thunderbird",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "thunderbird",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": "0"
    }
  ],
  "distribution_packages": [
    {
      "name": "firefox-esr",
      "fixed_version": "0",
      "applicability_unknown": true
    },
    {
      "name": "thunderbird",
      "fixed_version": "0",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-8.43.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for desktop applications 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1884-1",
      "fixed_version": "78.11.0-8.43.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1884-1",
      "provider_updated_at": "2026-02-04T04:10:21.023800Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-8.43.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for desktop applications 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1884-1",
      "fixed_version": "78.11.0-8.43.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1884-1",
      "provider_updated_at": "2026-02-04T04:10:21.023800Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-112.62.1"
            }
          ]
        }
      ],
      "release": "hpe helion openstack 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1886-1",
      "fixed_version": "78.11.0-112.62.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1886-1",
      "provider_updated_at": "2026-02-04T03:48:51.982400Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-112.62.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1886-1",
      "fixed_version": "78.11.0-112.62.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1886-1",
      "provider_updated_at": "2026-02-04T03:48:51.982400Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-112.62.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1886-1",
      "fixed_version": "78.11.0-112.62.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1886-1",
      "provider_updated_at": "2026-02-04T03:48:51.982400Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-112.62.1"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1886-1",
      "fixed_version": "78.11.0-112.62.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1886-1",
      "provider_updated_at": "2026-02-04T03:48:51.982400Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-112.62.1"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1886-1",
      "fixed_version": "78.11.0-112.62.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1886-1",
      "provider_updated_at": "2026-02-04T03:48:51.982400Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-112.62.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1886-1",
      "fixed_version": "78.11.0-112.62.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1886-1",
      "provider_updated_at": "2026-02-04T03:48:51.982400Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-112.62.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1886-1",
      "fixed_version": "78.11.0-112.62.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1886-1",
      "provider_updated_at": "2026-02-04T03:48:51.982400Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-112.62.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1886-1",
      "fixed_version": "78.11.0-112.62.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1886-1",
      "provider_updated_at": "2026-02-04T03:48:51.982400Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-112.62.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp2-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1886-1",
      "fixed_version": "78.11.0-112.62.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1886-1",
      "provider_updated_at": "2026-02-04T03:48:51.982400Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-112.62.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1886-1",
      "fixed_version": "78.11.0-112.62.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1886-1",
      "provider_updated_at": "2026-02-04T03:48:51.982400Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-112.62.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1886-1",
      "fixed_version": "78.11.0-112.62.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1886-1",
      "provider_updated_at": "2026-02-04T03:48:51.982400Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-112.62.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1886-1",
      "fixed_version": "78.11.0-112.62.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1886-1",
      "provider_updated_at": "2026-02-04T03:48:51.982400Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-112.62.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1886-1",
      "fixed_version": "78.11.0-112.62.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1886-1",
      "provider_updated_at": "2026-02-04T03:48:51.982400Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-112.62.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1886-1",
      "fixed_version": "78.11.0-112.62.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1886-1",
      "provider_updated_at": "2026-02-04T03:48:51.982400Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-3.144.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1919-1",
      "fixed_version": "78.11.0-3.144.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1919-1",
      "provider_updated_at": "2026-02-04T03:31:12.066654Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-3.144.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1919-1",
      "fixed_version": "78.11.0-3.144.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1919-1",
      "provider_updated_at": "2026-02-04T03:31:12.066654Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-3.144.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1919-1",
      "fixed_version": "78.11.0-3.144.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1919-1",
      "provider_updated_at": "2026-02-04T03:31:12.066654Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-3.144.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1919-1",
      "fixed_version": "78.11.0-3.144.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1919-1",
      "provider_updated_at": "2026-02-04T03:31:12.066654Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-3.144.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1919-1",
      "fixed_version": "78.11.0-3.144.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1919-1",
      "provider_updated_at": "2026-02-04T03:31:12.066654Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-3.144.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1919-1",
      "fixed_version": "78.11.0-3.144.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1919-1",
      "provider_updated_at": "2026-02-04T03:31:12.066654Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-3.144.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1919-1",
      "fixed_version": "78.11.0-3.144.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1919-1",
      "provider_updated_at": "2026-02-04T03:31:12.066654Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-3.144.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1919-1",
      "fixed_version": "78.11.0-3.144.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1919-1",
      "provider_updated_at": "2026-02-04T03:31:12.066654Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-3.144.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1919-1",
      "fixed_version": "78.11.0-3.144.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1919-1",
      "provider_updated_at": "2026-02-04T03:31:12.066654Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-3.144.1"
            }
          ]
        }
      ],
      "release": "manager proxy 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1919-1",
      "fixed_version": "78.11.0-3.144.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1919-1",
      "provider_updated_at": "2026-02-04T03:31:12.066654Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-3.144.1"
            }
          ]
        }
      ],
      "release": "manager retail branch server 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1919-1",
      "fixed_version": "78.11.0-3.144.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1919-1",
      "provider_updated_at": "2026-02-04T03:31:12.066654Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-3.144.1"
            }
          ]
        }
      ],
      "release": "manager server 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1919-1",
      "fixed_version": "78.11.0-3.144.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1919-1",
      "provider_updated_at": "2026-02-04T03:31:12.066654Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-3.144.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1919-1",
      "fixed_version": "78.11.0-3.144.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1919-1",
      "provider_updated_at": "2026-02-04T03:31:12.066654Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-8.43.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2021:1884-1",
      "fixed_version": "78.11.0-8.43.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2021:1884-1",
      "provider_updated_at": "2026-02-04T03:11:32.525947Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-lp152.2.58.1"
            }
          ]
        }
      ],
      "release": "leap 15.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2021:0858-1",
      "fixed_version": "78.11.0-lp152.2.58.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2021:0858-1",
      "provider_updated_at": "2026-02-04T02:23:51.358336Z",
      "applicability_unknown": true
    },
    {
      "name": "MozillaFirefox",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "78.11.0-78.131.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 11 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:14743-1",
      "fixed_version": "78.11.0-78.131.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:14743-1",
      "provider_updated_at": "2025-05-02T04:31:22.828325Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [firefox-esr]Unknown
    Details (4)
    • 140.12.0esr-1~deb12u1 · amd64 · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · arm64 · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

Next results

Observed:

References