rpm package

opensuse/firefox-esr&distro=openSUSE Tumbleweed

pkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweed

Vulnerabilities (2,366)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2026-12317	Hig	7.5	< 153.0-1.1	153.0-1.1	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12316	Cri	9.1	< 153.0-1.1	153.0-1.1	Jun 16, 2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12315	Cri	9.1	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12314	Hig	7.5	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12313	Med	4.7	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12312	Hig	7.5	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12311	Med	4.7	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12310	Hig	7.5	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12309	Med	6.5	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12308	Med	5.3	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12307	Med	5.3	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12306	Med	5.3	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12305	Hig	7.5	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12304	Cri	9.1	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12303	Med	4.3	< 153.0-1.1	153.0-1.1	Jun 16, 2026	Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12302	Med	6.5	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12301	Med	5.3	< 153.0-1.1	153.0-1.1	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12300	Med	5.3	< 153.0-1.1	153.0-1.1	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12299	Med	5.4	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12298	Med	5.4	< 140.12.0-1.1	140.12.0-1.1	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

CVE-2026-12317HigJun 16, 2026
affected < 153.0-1.1fixed 153.0-1.1
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12316CriJun 16, 2026
affected < 153.0-1.1fixed 153.0-1.1
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12315CriJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12314HigJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12313MedJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12312HigJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12311MedJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12310HigJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12309MedJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12308MedJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12307MedJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12306MedJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12305HigJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12304CriJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12303MedJun 16, 2026
affected < 153.0-1.1fixed 153.0-1.1
Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12302MedJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12301MedJun 16, 2026
affected < 153.0-1.1fixed 153.0-1.1
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12300MedJun 16, 2026
affected < 153.0-1.1fixed 153.0-1.1
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12299MedJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12298MedJun 16, 2026
affected < 140.12.0-1.1fixed 140.12.0-1.1
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

Page 5 of 119