Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 52

• Critical 10.0
  CVE-2026-2760

  Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component

  Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 10.0
  CVE-2026-2761

  Sandbox escape in the Graphics: WebRender component

  Sandbox escape in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 10.0
  CVE-2026-2768

  Sandbox escape in the Storage: IndexedDB component

  Sandbox escape in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 10.0
  CVE-2026-2776

  Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software

  Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 10.0
  CVE-2026-2778

  Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component

  Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2634

  Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS

  Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147…

  Mozilla Firefox for iOS mozjs52 mozjs68 iOS Browsers Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2757

  Incorrect boundary conditions in the WebRTC: Audio/Video component

  Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2758

  Use-after-free in the JavaScript: GC component

  Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2759

  Incorrect boundary conditions in the Graphics: ImageLib component

  Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2762

  Integer overflow in the JavaScript: Standard Library component

  Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2763 Public exploit

  Use-after-free in the JavaScript Engine component

  Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2764 Public exploit

  JIT miscompilation, use-after-free in the JavaScript Engine: JIT component

  JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2765

  Use-after-free in the JavaScript Engine component

  Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2766 Public exploit

  Use-after-free in the JavaScript Engine: JIT component

  Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2771

  Undefined behavior in the DOM: Core & HTML component

  Undefined behavior in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2773

  Incorrect boundary conditions in the Web Audio component

  Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2775

  Mitigation bypass in the DOM: HTML Parser component

  Mitigation bypass in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2777

  Privilege escalation in the Messaging System component

  Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2779

  Incorrect boundary conditions in the Networking: JAR component

  Incorrect boundary conditions in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2784

  Mitigation bypass in the DOM: Security component

  Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2788

  Incorrect boundary conditions in the Audio/Video: GMP component

  Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2791

  Mitigation bypass in the Networking: Cache component

  Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2792

  Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148

  Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary co…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2793

  Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148

  Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2796 Public exploit

  JIT miscompilation in the JavaScript: WebAssembly component

  JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2800

  Spoofing issue in the WebAuthn component in Firefox for Android

  Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2805

  Invalid pointer in the DOM: Core & HTML component

  Invalid pointer in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.8
  CVE-2026-2807

  Memory safety bugs fixed in Firefox 148 and Thunderbird 148

  Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefo…

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026
• Critical 9.1
  CVE-2026-2806

  Uninitialized memory in the Graphics: Text component

  Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2767

  Use-after-free in the JavaScript: WebAssembly component

  Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2769

  Use-after-free in the Storage: IndexedDB component

  Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2770

  Use-after-free in the DOM: Bindings (WebIDL) component

  Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2772

  Use-after-free in the Audio/Video: Playback component

  Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2774

  Integer overflow in the Audio/Video component

  Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2780

  Privilege escalation in the Netmonitor component

  Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2781

  Integer overflow in the Libraries component in NSS

  Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2782

  Privilege escalation in the Netmonitor component

  Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2785

  Invalid pointer in the JavaScript Engine component

  Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2786

  Use-after-free in the JavaScript Engine component

  Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2787

  Use-after-free in the DOM: Window and Location component

  Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2789

  Use-after-free in the Graphics: ImageLib component

  Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2790

  Same-origin policy bypass in the Networking: JAR component

  Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2795

  Use-after-free in the JavaScript: GC component

  Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2797

  Use-after-free in the JavaScript: GC component

  Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2798

  Use-after-free in the DOM: Core & HTML component

  Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-2799

  Use-after-free in the DOM: Core & HTML component

  Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026
• High 7.5
  CVE-2026-2801

  Incorrect boundary conditions in the JavaScript: WebAssembly component

  Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026
• High 7.5
  CVE-2026-2803

  Information disclosure, mitigation bypass in the Settings UI component

  Information disclosure, mitigation bypass in the Settings UI component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026
• Medium 6.5
  CVE-2026-2783

  Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component

  Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• Medium 6.5
  CVE-2026-2794

  Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android

  Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148.

  Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Wolfi
  Feb 24, 2026
• Medium 5.4
  CVE-2026-2804

  Use-after-free in the JavaScript: WebAssembly component

  Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026
• Medium 4.2
  CVE-2026-2802

  Race condition in the JavaScript: GC component

  Race condition in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Feb 24, 2026

Revision history

1. 2026-11-08 #21

   Neue Updates von Oracle Linux aufgenommen

2. 2026-11-05 #20

   Neue Updates von Oracle Linux aufgenommen

3. 2026-09-21 #19

   Neue Updates von Oracle Linux aufgenommen

4. 2026-06-30 #18

   Neue Updates von Oracle Linux aufgenommen

5. 2026-06-15 #17

   Neue Updates von Oracle Linux aufgenommen

6. 2026-06-11 #16

   Neue Updates von Oracle Linux aufgenommen

7. 2026-06-10 #15

   Neue Updates von Oracle Linux aufgenommen

8. 2026-03-25 #14

   Neue Updates von Debian aufgenommen

9. 2026-03-19 #13

   Neue Updates von Amazon aufgenommen

10. 2026-03-12 #12

    Neue Updates von SUSE aufgenommen

11. 2026-03-11 #11

    Neue Updates von SUSE und Red Hat aufgenommen

12. 2026-03-10 #10

    Neue Updates von Red Hat aufgenommen

13. 2026-03-09 #9

    Neue Updates von Red Hat aufgenommen

14. 2026-03-08 #8

    Neue Updates von Red Hat aufgenommen

15. 2026-03-05 #7

    Neue Updates von Ubuntu und SUSE aufgenommen

16. 2026-03-04 #6

    Neue Updates von Ubuntu aufgenommen

17. 2026-03-02 #5

    Neue Updates von SUSE, Red Hat, Debian und Oracle Linux aufgenommen

18. 2026-03-01 #4

    Neue Updates von Red Hat, Debian und openSUSE aufgenommen

19. 2026-02-26 #3

    Neue Updates von Debian, Oracle Linux und Rocky Enterprise Software Foundation aufgenommen

20. 2026-02-25 #2

    Neue Updates von openSUSE, Debian und Red Hat aufgenommen

21. 2026-02-24 #1

    Initiale Fassung

References

• MFSA 2026-12 Security Vulnerabilities fixed in Firefox for iOS 147.4 vom 2026-02-24
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-12/
• MFSA 2026-13 Security Vulnerabilities fixed in Firefox 148 vom 2026-02-24
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-13/
• MFSA 2026-14 Security Vulnerabilities fixed in Firefox ESR 115.33 vom 2026-02-24
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-14/
• MFSA 2026-15 Security Vulnerabilities fixed in Firefox ESR 140.8 vom 2026-02-24
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-15/
• MFSA 2026-16 Security Vulnerabilities fixed in Thunderbird 148 vom 2026-02-24
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-16/
• MFSA 2026-17 Security Vulnerabilities fixed in Thunderbird 140.8 vom 2026-02-24
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-17/
• Red Hat Security Advisory RHSA-2026:3339 vom 2026-02-25
  https://access.redhat.com/errata/RHSA-2026:3339
• openSUSE Security Update OPENSUSE-SU-2026:10242-1 vom 2026-02-25
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QOYQZDLF7VEL3ZUY46SS34MOSIMJTZ3L/
• Debian Security Advisory DSA-6148 vom 2026-02-25
  https://lists.debian.org/debian-security-announce/2026/msg00057.html
• Red Hat Security Advisory RHSA-2026:3361 vom 2026-02-25
  https://access.redhat.com/errata/RHSA-2026:3361
• Red Hat Security Advisory RHSA-2026:3338 vom 2026-02-25
  https://access.redhat.com/errata/RHSA-2026:3338
• Debian Security Advisory DSA-6149 vom 2026-02-26
  https://lists.debian.org/debian-security-announce/2026/msg00058.html
• Oracle Linux Security Advisory ELSA-2026-3339 vom 2026-02-27
  http://linux.oracle.com/errata/ELSA-2026-3339.html
• Rocky Linux Security Advisory RLSA-2026:3361 vom 2026-02-26
  https://errata.build.resf.org/RLSA-2026:3361
• Rocky Linux Security Advisory RLSA-2026:3339 vom 2026-02-26
  https://errata.build.resf.org/RLSA-2026:3339
• Rocky Linux Security Advisory RLSA-2026:3338 vom 2026-02-26
  https://errata.build.resf.org/RLSA-2026:3338
• Oracle Linux Security Advisory ELSA-2026-3361 vom 2026-02-26
  https://linux.oracle.com/errata/ELSA-2026-3361.html
• Oracle Linux Security Advisory ELSA-2026-3338 vom 2026-02-27
  http://linux.oracle.com/errata/ELSA-2026-3338.html
• Red Hat Security Advisory RHSA-2026:3495 vom 2026-03-02
  https://access.redhat.com/errata/RHSA-2026:3495
• Red Hat Security Advisory RHSA-2026:3497 vom 2026-03-02
  https://access.redhat.com/errata/RHSA-2026:3497
• Red Hat Security Advisory RHSA-2026:3493 vom 2026-03-02
  https://access.redhat.com/errata/RHSA-2026:3493
• Debian Security Advisory DLA-4495 vom 2026-02-28
  https://lists.debian.org/debian-lts-announce/2026/02/msg00034.html
• Debian Security Advisory DSA-6152 vom 2026-02-28
  https://lists.debian.org/debian-security-announce/2026/msg00061.html
• Red Hat Security Advisory RHSA-2026:3496 vom 2026-03-02
  https://access.redhat.com/errata/RHSA-2026:3496
• Red Hat Security Advisory RHSA-2026:3494 vom 2026-03-02
  https://access.redhat.com/errata/RHSA-2026:3494
• openSUSE Security Update OPENSUSE-SU-2026:10257-1 vom 2026-02-27
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q7GX3YZM5UTV3V2KG6DNS4MDJZ2U7AUP/
• Red Hat Security Advisory RHSA-2026:3491 vom 2026-03-02
  https://access.redhat.com/errata/RHSA-2026:3491
• Red Hat Security Advisory RHSA-2026:3492 vom 2026-03-02
  https://access.redhat.com/errata/RHSA-2026:3492
• Red Hat Security Advisory RHSA-2026:3517 vom 2026-03-02
  https://access.redhat.com/errata/RHSA-2026:3517
• Red Hat Security Advisory RHSA-2026:3516 vom 2026-03-02
  https://access.redhat.com/errata/RHSA-2026:3516
• SUSE Security Update SUSE-SU-2026:0740-1 vom 2026-03-02
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024523.html
• Red Hat Security Advisory RHSA-2026:3515 vom 2026-03-02
  https://access.redhat.com/errata/RHSA-2026:3515
• Debian Security Advisory DLA-4496 vom 2026-03-02
  https://lists.debian.org/debian-lts-announce/2026/03/msg00000.html
• Oracle Linux Security Advisory ELSA-2026-3517 vom 2026-03-03
  https://linux.oracle.com/errata/ELSA-2026-3517.html
• Oracle Linux Security Advisory ELSA-2026-3516 vom 2026-03-03
  https://linux.oracle.com/errata/ELSA-2026-3516.html
• Rocky Linux Security Advisory RLSA-2026:3515 vom 2026-03-03
  https://errata.build.resf.org/RLSA-2026:3515
• Rocky Linux Security Advisory RLSA-2026:3516 vom 2026-03-03
  https://errata.build.resf.org/RLSA-2026:3516
• Oracle Linux Security Advisory ELSA-2026-3515 vom 2026-03-03
  https://linux.oracle.com/errata/ELSA-2026-3515.html
• IGEL Security Notice ISN-2026-05 vom 2026-03-03
  https://kb.igel.com/en/security-safety/current/isn-2026-05-firefox-esr-vulnerabilities
• Ubuntu Security Notice USN-8071-1 vom 2026-03-04
  https://ubuntu.com/security/notices/USN-8071-1
• Ubuntu Security Notice USN-8071-2 vom 2026-03-05
  https://ubuntu.com/security/notices/USN-8071-2
• SUSE Security Update SUSE-SU-2026:0814-1 vom 2026-03-05
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024583.html
• SUSE Security Update SUSE-SU-2026:0812-1 vom 2026-03-05
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024584.html
• SUSE Security Update SUSE-SU-2026:0813-1 vom 2026-03-05
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024585.html
• Red Hat Security Advisory RHSA-2026:3978 vom 2026-03-09
  https://access.redhat.com/errata/RHSA-2026:3978
• Red Hat Security Advisory RHSA-2026:3979 vom 2026-03-09
  https://access.redhat.com/errata/RHSA-2026:3979
• Red Hat Security Advisory RHSA-2026:3984 vom 2026-03-09
  https://access.redhat.com/errata/RHSA-2026:3984
• Red Hat Security Advisory RHSA-2026:3980 vom 2026-03-09
  https://access.redhat.com/errata/RHSA-2026:3980
• Red Hat Security Advisory RHSA-2026:3982 vom 2026-03-09
  https://access.redhat.com/errata/RHSA-2026:3982
• Red Hat Security Advisory RHSA-2026:3983 vom 2026-03-09
  https://access.redhat.com/errata/RHSA-2026:3983
• Red Hat Security Advisory RHSA-2026:3981 vom 2026-03-09
  https://access.redhat.com/errata/RHSA-2026:3981
• Red Hat Security Advisory RHSA-2026:4022 vom 2026-03-09
  https://access.redhat.com/errata/RHSA-2026:4022
• Red Hat Security Advisory RHSA-2026:3976 vom 2026-03-09
  https://access.redhat.com/errata/RHSA-2026:3976
• Red Hat Security Advisory RHSA-2026:4260 vom 2026-03-11
  https://access.redhat.com/errata/RHSA-2026:4260
• SUSE Security Update SUSE-SU-2026:0871-1 vom 2026-03-12
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024678.html
• Red Hat Security Advisory RHSA-2026:4432 vom 2026-03-12
  https://access.redhat.com/errata/RHSA-2026:4432
• SUSE Security Update SUSE-SU-2026:0880-1 vom 2026-03-12
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024685.html
• Amazon Linux Security Advisory ALAS2-2026-3198 vom 2026-03-19
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3198.html
• Amazon Linux Security Advisory ALAS2FIREFOX-2026-054 vom 2026-03-19
  https://alas.aws.amazon.com/AL2/ALAS2FIREFOX-2026-054.html
• Debian Security Advisory DLA-4508 vom 2026-03-25
  https://lists.debian.org/debian-lts-announce/2026/03/msg00012.html
• Oracle Linux Security Advisory ELSA-2026-3984 vom 2026-06-11
  https://linux.oracle.com/errata/ELSA-2026-3984.html
• Oracle Linux Security Advisory ELSA-2026-8427 vom 2026-06-11
  https://linux.oracle.com/errata/ELSA-2026-8427.html
• Oracle Linux Security Advisory ELSA-2026-13977 vom 2026-06-11
  https://linux.oracle.com/errata/ELSA-2026-13977.html
• Oracle Linux Security Advisory ELSA-2026-22708 vom 2026-06-15
  https://linux.oracle.com/errata/ELSA-2026-22708.html
• Oracle Linux Security Advisory ELSA-2026-19704 vom 2026-06-16
  https://linux.oracle.com/errata/ELSA-2026-19704.html
• Oracle Linux Security Advisory ELSA-2026-24983 vom 2026-06-30
  https://linux.oracle.com/errata/ELSA-2026-24983.html
• Oracle Linux Security Advisory ELSA-2026-26551 vom 2026-06-30
  https://linux.oracle.com/errata/ELSA-2026-26551.html
• Oracle Linux Security Advisory ELSA-2026-54248 vom 2026-09-22
  https://linux.oracle.com/errata/ELSA-2026-54248.html
• Oracle Linux Security Advisory ELSA-2026-65442 vom 2026-11-05
  https://linux.oracle.com/errata/ELSA-2026-65442-0.html
• Oracle Linux Security Advisory ELSA-2026-76741 vom 2026-11-06
  https://linux.oracle.com/errata/ELSA-2026-76741.html