[CVE-2026-100756 ] Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ES
High(8.1) Interessata Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.4.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.4.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Interessata · Corretta: 153.4.0-1.1
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.4.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
[CVE-2026-92005 ] Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
High(7.5) Interessata Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.3.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.3.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Interessata · Corretta: 153.3.0-1.1
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.3.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
[CVE-2026-74952 ] Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.2.
High(8.8) Interessata Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.2.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.2.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Interessata · Corretta: 153.2.0-1.1
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.2.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
[CVE-2026-74934 ] Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14
High(7.5) Sconosciuto Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.1.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.1.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 153.1.0-1.1
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 153.1.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
[CVE-2026-15718 ] We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6.
High(8.8) Sconosciuto Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.13.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.13.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.13.0-1.1
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.13.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
[CVE-2026-12289 ] Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
High(8.8) Sconosciuto Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.12.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.12.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.12.0-1.1
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.12.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
[CVE-2026-8388 ] Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.
High(7.5) Sconosciuto Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.11.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.11.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.11.0-1.1
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.11.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
[CVE-2026-8090 ] Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2.
High(7.5) Sconosciuto Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.10.2-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.10.2-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.10.2-1.1
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.10.2-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
[CVE-2026-7320 ] Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0
High(7.5) Sconosciuto Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.10.1-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.10.1-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.10.1-1.1
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.10.1-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
[CVE-2026-5731 ] Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and w
Critical(9.8) Sconosciuto Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.9.1-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.9.1-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.9.1-1.1
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.9.1-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
[CVE-2026-2757 ] Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.
High(8.8) Sconosciuto Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.8.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.8.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.8.0-1.1
nvd · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.8.0-1.1
Version impact unknown
nvd · firefox-esr · opensuse · tumbleweed
[CVE-2026-2447 ] libvpx vulnerability
High(8.1) Sconosciuto Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.1-1.1
Version impact unknown
usn · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.1-1.1
Version impact unknown
usn · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.7.1-1.1
usn · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.1-1.1
Version impact unknown
usn · firefox-esr · opensuse · tumbleweed
[CVE-2025-14321 ] firefox-esr: CVE-2025-14321
Critical(9.8) Sconosciuto Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.6.0-1.1
Version impact unknown
dsa · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.6.0-1.1
Version impact unknown
dsa · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.6.0-1.1
dsa · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.6.0-1.1
Version impact unknown
dsa · firefox-esr · opensuse · tumbleweed
[CVE-2025-14327 ] firefox-esr: CVE-2025-14327
High(7.5) Sconosciuto Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.0-1.1
Version impact unknown
dsa · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.0-1.1
Version impact unknown
dsa · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 140.7.0-1.1
dsa · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 140.7.0-1.1
Version impact unknown
dsa · firefox-esr · opensuse · tumbleweed
[CVE-2006-6077 ] firefox-esr-128.5.1-1.1 on GA media
Sconosciuto Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 5:03:21 PM UTC
Dettagli (4) 153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 128.5.1-1.1
Version impact unknown
pypi · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 128.5.1-1.1
Version impact unknown
pypi · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Corretta · Corretta: 128.5.1-1.1
pypi · firefox-esr · opensuse · tumbleweed
153.1.0-1.1 · x86_64 · tumbleweed
Sconosciuto · Corretta: 128.5.1-1.1
Version impact unknown
pypi · firefox-esr · opensuse · tumbleweed
