rpm package

opensuse/MozillaFirefox&distro=openSUSE Tumbleweed

pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed

Vulnerabilities (2,633)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2026-16399	Hig	7.5	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16398	Hig	7.5	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16397	Med	6.5	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153.
CVE-2026-16396	Hig	8.8	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16395	Cri	9.8	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16394	Cri	9.1	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16393	Cri	9.1	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16392	Cri	9.1	< 153.0-1.1	153.0-1.1	Jul 21, 2026	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16391	Hig	7.5	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16390	Cri	9.1	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16389	Cri	9.8	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16388	Cri	9.8	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16387	Cri	9.8	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16386	Hig	7.5	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16385	Hig	7.5	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16384	Hig	7.5	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16383	Cri	9.8	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16382	Cri	9.8	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16381	Cri	9.1	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16380	Cri	9.1	< 153.0-1.1	153.0-1.1	Jul 21, 2026	Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVE-2026-16399HigJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16398HigJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16397MedJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153.
CVE-2026-16396HigJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16395CriJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16394CriJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16393CriJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16392CriJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16391HigJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16390CriJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16389CriJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16388CriJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16387CriJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16386HigJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16385HigJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16384HigJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16383CriJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16382CriJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16381CriJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16380CriJul 21, 2026
affected < 153.0-1.1fixed 153.0-1.1
Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Page 6 of 132