[Git][security-tracker-team/security-tracker][master] 2 commits: Track fixed version for firefox issues via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Jul 28 05:31:28 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a7d6e8bd by Salvatore Bonaccorso at 2026-07-28T06:28:59+02:00
Track fixed version for firefox issues via unstable
- - - - -
fb11fbbc by Salvatore Bonaccorso at 2026-07-28T06:29:20+02:00
Update status for CVE-2026-12318
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6908,7 +6908,7 @@ CVE-2026-16361 (Memory safety bugs present in Thunderbird ESR 140.12. Some of th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16361
CVE-2026-16360 (Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 a ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16360
@@ -6916,33 +6916,33 @@ CVE-2026-16360 (Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 14
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16360
CVE-2026-16412 (Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16412
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16412
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16412
CVE-2026-16411 (Memory safety bugs present in Firefox 152. Some of these bugs showed e ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16411
CVE-2026-16410 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16410
CVE-2026-16409 (Invalid pointer in the Security: PSM component. This vulnerability was ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16409
CVE-2026-16408 (Integer overflow in the Audio/Video: Playback component. This vulnerab ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16408
CVE-2026-16407 (Mitigation bypass in the DOM: Service Workers component. This vulnerab ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16407
CVE-2026-16406 (Mitigation bypass in the Networking component. This vulnerability was ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16406
CVE-2026-16405 (Information disclosure in the Networking: WebSockets component. This v ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16405
@@ -6952,57 +6952,57 @@ CVE-2026-16404 (Spoofing issue in Firefox for Android. This vulnerability was fi
- firefox <not-affected> (Only affects Firefox on Android)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16404
CVE-2026-16403 (Spoofing issue in the Address Bar component. This vulnerability was fi ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16403
CVE-2026-16402 (Integer overflow in the Graphics: ImageLib component. This vulnerabili ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16402
CVE-2026-16401 (Privilege escalation in the Data Loss Prevention component. This vulne ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16401
CVE-2026-16400 (Information disclosure in the DOM: Security component. This vulnerabil ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16400
CVE-2026-16399 (Site isolation issue in the DOM: Navigation component. This vulnerabil ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16399
CVE-2026-16398 (Site isolation issue in the Graphics component. This vulnerability was ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16398
CVE-2026-16397 (Clickjacking issue in the WebExtensions component in Firefox for Andro ...)
- firefox <not-affected> (Only affects Firefox on Android)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16397
CVE-2026-16396 (Privilege escalation in WebExtensions. This vulnerability was fixed in ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16396
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16396
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16396
CVE-2026-16395 (Integer overflow in the Audio/Video component. This vulnerability was ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16395
CVE-2026-16394 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16394
CVE-2026-16359 (Incorrect boundary conditions in the Audio/Video: GMP component. This ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16359
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16359
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16359
CVE-2026-16393 (Incorrect boundary conditions in the Graphics: WebGPU component. This ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16393
CVE-2026-16392 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16392
CVE-2026-16391 (Information disclosure in the Storage: IndexedDB component. This vulne ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16391
@@ -7010,62 +7010,62 @@ CVE-2026-16391 (Information disclosure in the Storage: IndexedDB component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16391
CVE-2026-16390 (Mitigation bypass in the Enterprise Policies component. This vulnerabi ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16390
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16390
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16390
CVE-2026-16389 (Incorrect boundary conditions, integer overflow in the Libraries compo ...)
- - firefox <unfixed>
+ - firefox 153.0-1
- nss 2:3.126-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16389
NOTE: https://hg-edge.mozilla.org/projects/nss/rev/9e854d9c6234
CVE-2026-16388 (Sandbox escape in the DOM: Networking component. This vulnerability wa ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16388
CVE-2026-16387 (Site isolation issue in the Networking component. This vulnerability w ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16387
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16387
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16387
CVE-2026-16386 (Information disclosure due to uninitialized memory in the Graphics: We ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16386
CVE-2026-16385 (Information disclosure due to uninitialized memory in the Graphics: We ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16385
CVE-2026-16384 (Information disclosure due to uninitialized memory in the Graphics: We ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16384
CVE-2026-16383 (Mitigation bypass in the DOM: Networking component. This vulnerability ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16383
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16383
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16383
CVE-2026-16382 (Mitigation bypass in the DOM: Service Workers component. This vulnerab ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16382
CVE-2026-16381 (Same-origin policy bypass in the Networking: DNS component. This vulne ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16381
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16381
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16381
CVE-2026-16380 (Mitigation bypass in the Networking component. This vulnerability was ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16380
CVE-2026-16358 (Site isolation issue in the Graphics: WebRender component. This vulner ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16358
@@ -7073,29 +7073,29 @@ CVE-2026-16358 (Site isolation issue in the Graphics: WebRender component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16358
CVE-2026-16379 (Privilege escalation in the DOM: Content Processes component. This vul ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16379
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16379
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16379
CVE-2026-16378 (Other issue in the DOM: Copy & Paste and Drag & Drop component. This v ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16378
CVE-2026-16377 (Mitigation bypass in the PDF Viewer component. This vulnerability was ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16377
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16377
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16377
CVE-2026-16376 (Denial-of-service in the Graphics: WebGPU component. This vulnerabilit ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16376
CVE-2026-16375 (Site isolation issue in the Networking: HTTP component. This vulnerabi ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16375
@@ -7103,7 +7103,7 @@ CVE-2026-16375 (Site isolation issue in the Networking: HTTP component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16375
CVE-2026-16374 (Information disclosure in the Framework component in DevTools. This vu ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16374
@@ -7113,22 +7113,22 @@ CVE-2026-16373 (Information disclosure in the Privacy component in Firefox for A
- firefox <not-affected> (Only affects Firefox on Android)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16373
CVE-2026-16372 (Privilege escalation in the DOM: Content Processes component. This vul ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16372
CVE-2026-16371 (Privilege escalation in the DOM: Navigation component. This vulnerabil ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16371
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16371
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16371
CVE-2026-16370 (Mitigation bypass in the DOM: Networking component. This vulnerability ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16370
CVE-2026-16357 (Incorrect boundary conditions in the Graphics component. This vulnerab ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16357
@@ -7136,7 +7136,7 @@ CVE-2026-16357 (Incorrect boundary conditions in the Graphics component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16357
CVE-2026-16356 (Sandbox escape due to use-after-free in the Disability Access APIs com ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16356
@@ -7144,7 +7144,7 @@ CVE-2026-16356 (Sandbox escape due to use-after-free in the Disability Access AP
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16356
CVE-2026-16355 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16355
@@ -7152,7 +7152,7 @@ CVE-2026-16355 (JIT miscompilation in the JavaScript Engine: JIT component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16355
CVE-2026-16369 (Integer overflow in the JavaScript: WebAssembly component. This vulner ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16369
@@ -7160,18 +7160,18 @@ CVE-2026-16369 (Integer overflow in the JavaScript: WebAssembly component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16369
CVE-2026-16368 (Incorrect boundary conditions in the JavaScript: WebAssembly component ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16368
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16368
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16368
CVE-2026-16367 (Sandbox escape due to invalid pointer in the Disability Access APIs co ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16367
CVE-2026-16354 (Information disclosure in the Graphics: ImageLib component. This vulne ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16354
@@ -7179,24 +7179,24 @@ CVE-2026-16354 (Information disclosure in the Graphics: ImageLib component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16354
CVE-2026-16353 (Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerab ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16353
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16353
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16353
CVE-2026-16366 (Privilege escalation in the DOM: Navigation component. This vulnerabil ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16366
CVE-2026-16365 (Privilege escalation in the DOM: Workers component. This vulnerability ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16365
CVE-2026-16364 (Incorrect boundary conditions in the Audio/Video: Playback component. ...)
- - firefox <unfixed>
+ - firefox 153.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16364
CVE-2026-16363 (JIT miscompilation in the JavaScript: WebAssembly component. This vuln ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16363
@@ -7204,7 +7204,7 @@ CVE-2026-16363 (JIT miscompilation in the JavaScript: WebAssembly component. Thi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16363
CVE-2026-16352 (Sandbox escape due to use-after-free in the Disability Access APIs com ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16352
@@ -7212,7 +7212,7 @@ CVE-2026-16352 (Sandbox escape due to use-after-free in the Disability Access AP
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16352
CVE-2026-16351 (Sandbox escape due to use-after-free in the DOM: Navigation component. ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16351
@@ -7220,7 +7220,7 @@ CVE-2026-16351 (Sandbox escape due to use-after-free in the DOM: Navigation comp
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16351
CVE-2026-16362 (Use-after-free in the WebRTC: Audio/Video component. This vulnerabilit ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16362
@@ -7228,7 +7228,7 @@ CVE-2026-16362 (Use-after-free in the WebRTC: Audio/Video component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16362
CVE-2026-16350 (Incorrect boundary conditions in the Audio/Video: cubeb component. Thi ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16350
@@ -7236,7 +7236,7 @@ CVE-2026-16350 (Incorrect boundary conditions in the Audio/Video: cubeb componen
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16350
CVE-2026-16349 (Same-origin policy bypass in the DOM: Navigation component. This vulne ...)
{DSA-6394-1 DLA-4695-1}
- - firefox <unfixed>
+ - firefox 153.0-1
- firefox-esr 140.13.0esr-1
- thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16349
@@ -34836,7 +34836,7 @@ CVE-2026-12319 (Denial-of-service in the Audio/Video: Playback component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12319
CVE-2026-12318 (Incorrect boundary conditions in the Libraries component in NSS. This ...)
{DLA-4694-1}
- - firefox <unfixed>
+ - firefox 152.0-1
- nss 2:3.124-1
[trixie] - nss 2:3.110-1+deb13u3
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12318
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/70c882d39fb11be90bc6bf5957a09b1be610874f...fb11fbbc3039eecac4ee52526803c008c475ee1a
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/70c882d39fb11be90bc6bf5957a09b1be610874f...fb11fbbc3039eecac4ee52526803c008c475ee1a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260728/98e1d723/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list