CVE catalog

CVE-2026-2781

Integer overflow in the Libraries component in NSS. This vulnerability affects Firefox < 148, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.

[CVE catalog]

Severity: Medium · CVSS 6.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Published: Feb 24, 2026, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.43% · Oct 25, 2026

Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	nss	sid	`2:3.131.1-1`	fixed
Debian	nss	forky	`2:3.131.1-1`	fixed
Debian	nss	trixie	`2:3.110-1+deb13u4`	fixed
Debian	nss	trixie-security	`2:3.110-1+deb13u4`	fixed
Debian	nss	bookworm	`2:3.87.1-1+deb12u2`	fixed
Debian	nss	bookworm-security	`2:3.87.1-1+deb12u4`	fixed
Debian	firefox-esr	sid	`153.5.1esr-1`	fixed
Debian	firefox-esr	forky	`153.5.1esr-1`	fixed
Debian	firefox-esr	trixie	`140.15.0esr-1~deb13u1`	fixed
Debian	firefox-esr	trixie-security	`153.5.1esr-1~deb13u1`	fixed
Debian	firefox-esr	bookworm	`140.12.0esr-1~deb12u1`	fixed
Debian	firefox-esr	bookworm-security	`153.5.1esr-1~deb12u1`	fixed
Debian	thunderbird	sid	`1:153.5.1esr-1`	fixed
Debian	thunderbird	forky	`1:153.5.0esr-1`	fixed
Debian	thunderbird	trixie	`1:140.12.0esr-1~deb13u1`	fixed
Debian	thunderbird	trixie-security	`1:153.5.1esr-1~deb13u2`	fixed
Debian	thunderbird	bookworm	`1:140.12.0esr-1~deb12u1`	fixed
Debian	thunderbird	bookworm-security	`1:153.5.1esr-1~deb12u1`	fixed
Cpe	firefox-esr	Not reported	`140.8.0esr-1~deb12u1`	fixed
Cpe	nss	Not reported	`2:3.87.1-1+deb12u2`	fixed
Cpe	thunderbird	Not reported	`1:140.8.0esr-1~deb12u1`	fixed
Cpe	nss	Not reported	`2:3.98-1ubuntu0.1`	fixed
Cpe	libnss3	Not reported	`2:3.98-1ubuntu0.1`	fixed
Cpe	libnss3-dev	Not reported	`2:3.98-1ubuntu0.1`	fixed
Cpe	libnss3-tools	Not reported	`2:3.98-1ubuntu0.1`	fixed
Ubuntu	nss	pro	`2:3.45-1ubuntu2`	vulnerable
Ubuntu	nss	pro	`2:3.47-1ubuntu1`	vulnerable
Ubuntu	nss	pro	`2:3.47-1ubuntu2`	vulnerable
Ubuntu	nss	pro	`2:3.48-1ubuntu1`	vulnerable
Ubuntu	nss	pro	`2:3.49.1-1ubuntu1`	vulnerable
Ubuntu	nss	pro	`2:3.49.1-1ubuntu1.1`	vulnerable
Ubuntu	nss	pro	`2:3.49.1-1ubuntu1.2`	vulnerable
Ubuntu	nss	pro	`2:3.49.1-1ubuntu1.4`	vulnerable
Ubuntu	nss	pro	`2:3.49.1-1ubuntu1.5`	vulnerable
Ubuntu	nss	pro	`2:3.49.1-1ubuntu1.6`	vulnerable
Ubuntu	nss	pro	`2:3.49.1-1ubuntu1.7`	vulnerable
Ubuntu	nss	pro	`2:3.49.1-1ubuntu1.8`	vulnerable
Ubuntu	nss	pro	`2:3.49.1-1ubuntu1.9`	vulnerable
Ubuntu	nss	pro	`2:3.98-0ubuntu0.20.04.1`	vulnerable
Ubuntu	nss	pro	`2:3.98-0ubuntu0.20.04.2`	vulnerable
Ubuntu	nss	pro	`2:3.98-0ubuntu0.20.04.2+esm1`	fixed
Ubuntu	nss	22.04	`2:3.68-1ubuntu1`	vulnerable
Ubuntu	nss	22.04	`2:3.68-1ubuntu2`	vulnerable
Ubuntu	nss	22.04	`2:3.68.2-0ubuntu1`	vulnerable
Ubuntu	nss	22.04	`2:3.68.2-0ubuntu1.1`	vulnerable
Ubuntu	nss	22.04	`2:3.68.2-0ubuntu1.2`	vulnerable
Ubuntu	nss	22.04	`2:3.98-0ubuntu0.22.04.1`	vulnerable
Ubuntu	nss	22.04	`2:3.98-0ubuntu0.22.04.2`	vulnerable
Ubuntu	nss	22.04	`2:3.98-0ubuntu0.22.04.3`	fixed
Ubuntu	thunderbird	22.04	`1:91.1.2+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.3.0+build2-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.3.1+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.3.2+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.4.0+build1.1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.4.0+build2-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.5.0+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.5.1+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.6.1+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.7.0+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.7.0+build2-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.8.0+build2-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.9.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.11.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.2.2+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.4.2+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.7.1+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.8.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.9.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.10.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.11.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.13.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.15.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.15.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.3.1+build1-0ubuntu0.22.04.2`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.4.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.5.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.6.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.8.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.9.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.10.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.11.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.12.0+build3-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.13.0+build5-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.15.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.16.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.18.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:128.12.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:140.7.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	nss	24.04	`2:3.92-1`	vulnerable
Ubuntu	nss	24.04	`2:3.94-1`	vulnerable
Ubuntu	nss	24.04	`2:3.95-1`	vulnerable
Ubuntu	nss	24.04	`2:3.96.1-1`	vulnerable
Ubuntu	nss	24.04	`2:3.98-1`	vulnerable
Ubuntu	nss	24.04	`2:3.98-1build1`	vulnerable
Ubuntu	nss	24.04	`2:3.98-1ubuntu0.1`	fixed
Ubuntu	nss	25.10	`2:3.108-1ubuntu1`	vulnerable
Ubuntu	nss	25.10	`2:3.110-1`	vulnerable
Ubuntu	nss	25.10	`2:3.111-1`	vulnerable
Ubuntu	nss	25.10	`2:3.112-1`	vulnerable
Ubuntu	nss	25.10	`2:3.114-1`	vulnerable
Ubuntu	nss	25.10	`2:3.114-1ubuntu0.1`	fixed
Ubuntu	nss	26.04	`2:3.114-1`	vulnerable
Ubuntu	nss	26.04	`2:3.117-1`	vulnerable
Ubuntu	nss	26.04	`2:3.119-1`	vulnerable
Ubuntu	nss	26.04	`2:3.120-1`	vulnerable
Ubuntu	nss	26.04	`2:3.120-1ubuntu1`	fixed
Ubuntu	nss	22.04	`2:3.68-1ubuntu1`	vulnerable
Ubuntu	nss	22.04	`2:3.68-1ubuntu2`	vulnerable
Ubuntu	nss	22.04	`2:3.68.2-0ubuntu1`	vulnerable
Ubuntu	nss	22.04	`2:3.68.2-0ubuntu1.1`	vulnerable
Ubuntu	nss	22.04	`2:3.68.2-0ubuntu1.2`	vulnerable
Ubuntu	nss	22.04	`2:3.98-0ubuntu0.22.04.1`	vulnerable
Ubuntu	nss	22.04	`2:3.98-0ubuntu0.22.04.2`	vulnerable
Ubuntu	nss	22.04	`2:3.98-0ubuntu0.22.04.3`	fixed
Ubuntu	nss	24.04	`2:3.92-1`	vulnerable
Ubuntu	nss	24.04	`2:3.94-1`	vulnerable
Ubuntu	nss	24.04	`2:3.95-1`	vulnerable
Ubuntu	nss	24.04	`2:3.96.1-1`	vulnerable
Ubuntu	nss	24.04	`2:3.98-1`	vulnerable
Ubuntu	nss	24.04	`2:3.98-1build1`	vulnerable
Ubuntu	nss	24.04	`2:3.98-1ubuntu0.1`	fixed
Ubuntu	nss	25.10	`2:3.108-1ubuntu1`	vulnerable
Ubuntu	nss	25.10	`2:3.110-1`	vulnerable
Ubuntu	nss	25.10	`2:3.111-1`	vulnerable
Ubuntu	nss	25.10	`2:3.112-1`	vulnerable
Ubuntu	nss	25.10	`2:3.114-1`	vulnerable
Ubuntu	nss	25.10	`2:3.114-1ubuntu0.1`	fixed
Suse	mozilla-nss	linux enterprise micro 5.2	`3.112.3-150000.3.135.1`	fixed
Suse	mozilla-nss	linux enterprise micro 5.3	`3.112.3-150400.3.63.1`	fixed
Suse	mozilla-nss	linux enterprise micro 5.4	`3.112.3-150400.3.63.1`	fixed
Suse	mozilla-nss	linux enterprise micro 5.5	`3.112.3-150400.3.63.1`	fixed
Suse	mozilla-nss	linux enterprise module for basesystem 15 sp7	`3.112.3-150400.3.63.1`	fixed
Suse	mozilla-nss	linux enterprise high performance computing 15 sp4-espos	`3.112.3-150400.3.63.1`	fixed
Suse	mozilla-nss	linux enterprise high performance computing 15 sp4-ltss	`3.112.3-150400.3.63.1`	fixed
Suse	mozilla-nss	linux enterprise high performance computing 15 sp5-espos	`3.112.3-150400.3.63.1`	fixed
Suse	mozilla-nss	linux enterprise high performance computing 15 sp5-ltss	`3.112.3-150400.3.63.1`	fixed
Suse	mozilla-nss	linux enterprise server 15 sp4-ltss	`3.112.3-150400.3.63.1`	fixed
Suse	mozilla-nss	linux enterprise server 15 sp5-ltss	`3.112.3-150400.3.63.1`	fixed
Suse	mozilla-nss	linux enterprise server 15 sp6-ltss	`3.112.3-150400.3.63.1`	fixed
Suse	mozilla-nss	linux enterprise server for sap applications 15 sp4	`3.112.3-150400.3.63.1`	fixed
Suse	mozilla-nss	linux enterprise server for sap applications 15 sp5	`3.112.3-150400.3.63.1`	fixed
Suse	mozilla-nss	linux enterprise server for sap applications 15 sp6	`3.112.3-150400.3.63.1`	fixed
Opensuse	mozilla-nss	leap 15.6	`3.112.3-150400.3.63.1`	fixed
Suse	mozilla-nss	linux enterprise server 12 sp5-ltss	`3.112.3-58.136.1`	fixed
Suse	mozilla-nss	linux enterprise server ltss extended security 12 sp5	`3.112.3-58.136.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	nss	source	sid	`2:3.121-1`	not yet assigned	Not reported	Not reported
Debian	nss	source	forky	`2:3.121-1`	not yet assigned	Not reported	Not reported
Debian	nss	source	trixie	`2:3.110-1+deb13u1`	not yet assigned	Not reported	Not reported
Debian	nss	source	bookworm	`2:3.87.1-1+deb12u2`	not yet assigned	Not reported	Not reported
Debian	firefox-esr	source	sid	`140.8.0esr-1`	not yet assigned	Not reported	Not reported
Debian	firefox-esr	source	forky	`140.8.0esr-1`	not yet assigned	Not reported	Not reported
Debian	firefox-esr	source	trixie	`140.8.0esr-1~deb13u1`	not yet assigned	Not reported	Not reported
Debian	firefox-esr	source	bookworm	`140.8.0esr-1~deb12u1`	not yet assigned	Not reported	Not reported
Debian	thunderbird	source	sid	`1:140.8.0esr-1`	not yet assigned	Not reported	Not reported
Debian	thunderbird	source	forky	`1:140.8.0esr-1`	not yet assigned	Not reported	Not reported
Debian	thunderbird	source	trixie	`1:140.8.0esr-1~deb13u1`	not yet assigned	Not reported	Not reported
Debian	thunderbird	source	bookworm	`1:140.8.0esr-1~deb12u1`	not yet assigned	Not reported	Not reported
Cpe	firefox-esr	cpe	Not reported	`140.8.0esr-1~deb12u1`	Not reported	Not reported	Not reported
Cpe	nss	cpe	Not reported	`2:3.87.1-1+deb12u2`	Not reported	Not reported	Not reported
Cpe	thunderbird	cpe	Not reported	`1:140.8.0esr-1~deb12u1`	Not reported	Not reported	Not reported
Cpe	nss	cpe	Not reported	`2:3.98-1ubuntu0.1`	Not reported	Not reported	Not reported
Cpe	libnss3	cpe	Not reported	`2:3.98-1ubuntu0.1`	Not reported	Not reported	Not reported
Cpe	libnss3-dev	cpe	Not reported	`2:3.98-1ubuntu0.1`	Not reported	Not reported	Not reported
Cpe	libnss3-tools	cpe	Not reported	`2:3.98-1ubuntu0.1`	Not reported	Not reported	Not reported
Ubuntu	nss	deb	pro	`2:3.98-0ubuntu0.20.04.2+esm1`	Not reported	UBUNTU-CVE-2026-2781	Not reported
Ubuntu	nss	deb	22.04	`2:3.98-0ubuntu0.22.04.3`	Not reported	UBUNTU-CVE-2026-2781	Not reported
Ubuntu	nss	deb	24.04	`2:3.98-1ubuntu0.1`	Not reported	UBUNTU-CVE-2026-2781	Not reported
Ubuntu	nss	deb	25.10	`2:3.114-1ubuntu0.1`	Not reported	UBUNTU-CVE-2026-2781	Not reported
Ubuntu	nss	deb	26.04	`2:3.120-1ubuntu1`	Not reported	UBUNTU-CVE-2026-2781	Not reported
Ubuntu	nss	deb	22.04	`2:3.98-0ubuntu0.22.04.3`	Not reported	USN-8071-1	Not reported
Ubuntu	nss	deb	24.04	`2:3.98-1ubuntu0.1`	Not reported	USN-8071-1	Not reported
Ubuntu	nss	deb	25.10	`2:3.114-1ubuntu0.1`	Not reported	USN-8071-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise micro 5.2	`3.112.3-150000.3.135.1`	Not reported	SUSE-SU-2026:0740-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise micro 5.3	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise micro 5.4	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise micro 5.5	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise module for basesystem 15 sp7	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise high performance computing 15 sp4-espos	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise high performance computing 15 sp4-ltss	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise high performance computing 15 sp5-espos	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise high performance computing 15 sp5-ltss	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise server 15 sp4-ltss	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise server 15 sp5-ltss	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise server 15 sp6-ltss	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise server for sap applications 15 sp4	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise server for sap applications 15 sp5	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise server for sap applications 15 sp6	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Opensuse	mozilla-nss	rpm	leap 15.6	`3.112.3-150400.3.63.1`	Not reported	SUSE-SU-2026:0813-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise server 12 sp5-ltss	`3.112.3-58.136.1`	Not reported	SUSE-SU-2026:0814-1	Not reported
Suse	mozilla-nss	rpm	linux enterprise server ltss extended security 12 sp5	`3.112.3-58.136.1`	Not reported	SUSE-SU-2026:0814-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[firefox-esr]Fixed
Details (4)
- 140.12.0esr-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-ach]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-af]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-all]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-an]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-ar]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-ast]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-az]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-be]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-bg]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-bn]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-br]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-bs]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-ca]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-cak]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-ca-valencia]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-cs]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-cy]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-da]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
[firefox-esr-l10n-de]Fixed
Source package: [firefox-esr]
Details (4)
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.12.0esr-1~deb12u1 · all · bookworm
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12
- 140.14.0esr-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 140.8.0esr-1~deb12u1
  nvd · firefox-esr · debian · bookworm; nvd · firefox-esr · debian · 12

Next results

Observed: Oct 27, 2026, 7:32:04 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]