Packages / openSUSE Tumbleweed / Source / Productivity/Networking/Web/Browsers / MozillaFirefox

Source Package: MozillaFirefox (154.0-1.1)

Mozilla Firefox Web Browser

The following binary packages are built from this source package:

MozillaFirefox
Mozilla Firefox Web Browser
MozillaFirefox-branding-upstream
Upstream branding for Firefox
MozillaFirefox-devel
Devel package for Firefox
MozillaFirefox-translations-common
Common translations for Firefox
MozillaFirefox-translations-other
Extra translations for Firefox

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVE	Schweregrad	Betroffene Versionen
[CVE-2026-109704] Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.	High(8.8)	Betroffen Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `158.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `158.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Betroffen · Behoben: `158.0-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `158.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `158.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-96869] Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.	Medium(4.3)	Betroffen Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `157.0.1-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `157.0.1-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Betroffen · Behoben: `157.0.1-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `157.0.1-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `157.0.1-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-92005] Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.	High(7.5)	Betroffen Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `156.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `156.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Betroffen · Behoben: `156.0-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `156.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `156.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-84117] MozillaFirefox-155.0-1.1 on GA media	Unbekannt	Betroffen Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `155.0-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `155.0-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Betroffen · Behoben: `155.0-1.1` pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `155.0-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `155.0-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-74934] Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14	High(7.5)	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `154.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `154.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `154.0-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `154.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `154.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-16349] Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13.	High(7.5)	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `153.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `153.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `153.0-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `153.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `153.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-15718] We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6.	High(8.8)	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `152.0.6-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `152.0.6-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `152.0.6-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `152.0.6-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `152.0.6-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-14241] Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary c	Critical(9.8)	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `152.0.4-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `152.0.4-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `152.0.4-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `152.0.4-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `152.0.4-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-12289] Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.	High(8.8)	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `152.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `152.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `152.0-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `152.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `152.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-10701] Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3.	High(7.5)	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `151.0.3-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `151.0.3-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `151.0.3-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `151.0.3-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `151.0.3-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-8945] Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.	High(8.3)	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `151.0.1-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `151.0.1-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `151.0.1-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `151.0.1-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `151.0.1-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-8090] Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2.	High(7.5)	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `150.0.2-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `150.0.2-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `150.0.2-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `150.0.2-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `150.0.2-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-7320] Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0	High(7.5)	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `150.0.1-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `150.0.1-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `150.0.1-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `150.0.1-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `150.0.1-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-6746] Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.	High(7.5)	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `150.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `150.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `150.0-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `150.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `150.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-5731] Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and w	Critical(9.8)	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `149.0.2-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `149.0.2-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `149.0.2-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `149.0.2-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `149.0.2-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-3846] MozillaFirefox-148.0.2-1.1 on GA media	Unbekannt	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `148.0.2-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `148.0.2-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `148.0.2-1.1` pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `148.0.2-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `148.0.2-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-2757] Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.	High(8.8)	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `148.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `148.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `148.0-1.1` nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `148.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `148.0-1.1` Version impact unknown nvd · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-2447] libvpx vulnerability	High(8.1)	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `147.0.4-1.1` Version impact unknown usn · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `147.0.4-1.1` Version impact unknown usn · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `147.0.4-1.1` usn · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `147.0.4-1.1` Version impact unknown usn · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `147.0.4-1.1` Version impact unknown usn · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-24868] UBUNTU-CVE-2026-24868	Unbekannt	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `147.0.2-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `147.0.2-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `147.0.2-1.1` pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `147.0.2-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `147.0.2-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed
[CVE-2026-24869] UBUNTU-CVE-2026-24869	Unbekannt	Unbekannt Details (5) `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `147.0.2-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · noarch · tumbleweed Unbekannt · Behoben: `147.0.2-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Behoben · Behoben: `147.0.2-1.1` pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `147.0.2-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed `154.0-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `147.0.2-1.1` Version impact unknown pypi · MozillaFirefox · opensuse · tumbleweed

[Weitere Ergebnisse]

Zuletzt synchronisiert: Oct 24, 2026, 7:19:02 AM UTC

[CVE-Katalog]

Quellen

openSUSE Tumbleweed OSSSep 1, 2026
Authoritative source; repository metadata signature verified
Signaturnachweis
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Repository-signature verification record
Signed object
https://download.opensuse.org/tumbleweed/repo/oss/repodata/repomd.xml
Signed-object SHA-256
4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable