Mozilla Firefox und Mozilla Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 48

• Critical 10.0
  CVE-2026-4689

  Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component

  Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-4691

  Use-after-free in the CSS Parsing and Computation component

  Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-4696

  Use-after-free in the Layout: Text and Fonts component

  Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-4700

  Mitigation bypass in the Networking: HTTP component

  Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-4701

  Use-after-free in the JavaScript Engine component

  Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-4702

  JIT miscompilation in the JavaScript Engine component

  JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-4705

  Undefined behavior in the WebRTC: Signaling component

  Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-4710

  Incorrect boundary conditions in the Audio/Video component

  Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-4711

  Use-after-free in the Widget: Cocoa component

  Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-4717

  Privilege escalation in the Netmonitor component

  Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-4720

  Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149

  Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary co…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-4721

  Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149

  Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-4723

  Use-after-free in the JavaScript Engine component

  Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.8
  CVE-2026-4729

  Memory safety bugs fixed in Firefox 149 and Thunderbird 149

  Memory safety bugs present in Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefo…

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.6
  CVE-2026-4687

  Sandbox escape due to incorrect boundary conditions in the Telemetry component

  Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.6
  CVE-2026-4688

  Sandbox escape due to use-after-free in the Disability Access APIs component

  Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.6
  CVE-2026-4690

  Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component

  Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.6
  CVE-2026-4692 Public exploit

  Sandbox escape in the Responsive Design Mode component

  Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.3
  CVE-2026-4725

  Sandbox escape due to use-after-free in the Graphics: Canvas2D component

  Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.1
  CVE-2026-4715

  Uninitialized memory in the Graphics: Canvas2D component

  Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.1
  CVE-2026-4716

  Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component

  Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• Critical 9.1
  CVE-2026-4724

  Undefined behavior in the Audio/Video component

  Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Mar 24, 2026
• High 8.8
  CVE-2026-4698

  JIT miscompilation in the JavaScript Engine: JIT component

  JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 8.8
  CVE-2026-4722

  Privilege escalation in the IPC component

  Privilege escalation in the IPC component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Mar 24, 2026
• High 8.1
  CVE-2026-4718

  Undefined behavior in the WebRTC: Signaling component

  Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2025-59375

  libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that i…

  libexpat project libexpat thunderbird firefox-esr Debian Ubuntu Azure Linux Alpine Wolfi
  Sep 15, 2025
• High 7.5
  CVE-2026-4684

  Race condition, use-after-free in the Graphics: WebRender component

  Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4685

  Incorrect boundary conditions in the Graphics: Canvas2D component

  Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4686

  Incorrect boundary conditions in the Graphics: Canvas2D component

  Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4693

  Incorrect boundary conditions in the Audio/Video: Playback component

  Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4694

  Incorrect boundary conditions, integer overflow in the Graphics component

  Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4695

  Incorrect boundary conditions in the Audio/Video: Web Codecs component

  Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4697

  Incorrect boundary conditions in the Audio/Video: Web Codecs component

  Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4699

  Incorrect boundary conditions in the Layout: Text and Fonts component

  Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4704

  Denial-of-service in the WebRTC: Signaling component

  Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4706

  Incorrect boundary conditions in the Graphics: Canvas2D component

  Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4707

  Incorrect boundary conditions in the Graphics: Canvas2D component

  Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4708

  Incorrect boundary conditions in the Graphics component

  Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4709

  Incorrect boundary conditions in the Audio/Video: GMP component

  Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4712

  Information disclosure in the Widget: Cocoa component

  Information disclosure in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4713

  Incorrect boundary conditions in the Graphics component

  Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4714

  Incorrect boundary conditions in the Audio/Video component

  Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4719

  Incorrect boundary conditions in the Graphics: Text component

  Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4726

  Denial-of-service in the XML component

  Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Mar 24, 2026
• High 7.5
  CVE-2026-4727

  Denial-of-service in the Libraries component in NSS

  Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Mar 24, 2026
• High 7.4
  CVE-2026-4371

  Out of bounds read in IMAP parsing

  A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially …

  Mozilla Thunderbird thunderbird mozjs38 Debian Ubuntu
  Mar 24, 2026
• Medium 6.5
  CVE-2026-3889

  Spoofing issue in Thunderbird

  Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.

  Mozilla Thunderbird thunderbird mozjs38 Debian Ubuntu
  Mar 24, 2026
• Medium 6.5
  CVE-2026-4728

  Spoofing issue in the Privacy: Anti-Tracking component

  Spoofing issue in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Mar 24, 2026

Revision history

1. 2026-11-08 #22

   Neue Updates von Oracle Linux aufgenommen

2. 2026-11-05 #21

   Neue Updates von Oracle Linux aufgenommen

3. 2026-09-21 #20

   Neue Updates von Oracle Linux aufgenommen

4. 2026-06-30 #19

   Neue Updates von Oracle Linux aufgenommen

5. 2026-06-15 #18

   Neue Updates von Oracle Linux aufgenommen

6. 2026-06-11 #17

   Neue Updates von Oracle Linux aufgenommen

7. 2026-05-04 #16

   Neue Updates von openSUSE aufgenommen

8. 2026-04-19 #15

   Neue Updates von Red Hat aufgenommen

9. 2026-04-15 #14

   Neue Updates von Red Hat aufgenommen

10. 2026-04-14 #13

    Neue Updates von Red Hat aufgenommen

11. 2026-04-13 #12

    Neue Updates von Red Hat und Amazon aufgenommen

12. 2026-04-12 #11

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

13. 2026-04-09 #10

    Neue Updates von SUSE und Rocky Enterprise Software Foundation aufgenommen

14. 2026-04-07 #9

    Neue Updates von Rocky Enterprise Software Foundation, Red Hat und Oracle Linux aufgenommen

15. 2026-04-06 #8

    Neue Updates von Rocky Enterprise Software Foundation und Zero Day Initiative aufgenommen

16. 2026-04-01 #7

    Neue Updates von Oracle Linux, SUSE und openSUSE aufgenommen

17. 2026-03-31 #6

    Neue Updates von openSUSE aufgenommen

18. 2026-03-30 #5

    Neue Updates von Red Hat und Oracle Linux aufgenommen

19. 2026-03-29 #4

    Neue Updates von SUSE und Oracle Linux aufgenommen

20. 2026-03-26 #3

    Neue Updates von Debian aufgenommen

21. 2026-03-25 #2

    Neue Updates von openSUSE und Debian aufgenommen

22. 2026-03-24 #1

    Initiale Fassung

References

• Mozilla Foundation Security Advisory MFSA 2026-20 vom 2026-03-24
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/
• Mozilla Foundation Security Advisory MFSA 2026-21 vom 2026-03-24
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-21/
• Mozilla Foundation Security Advisory MFSA 2026-22 vom 2026-03-24
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-22/
• Mozilla Foundation Security Advisory MFSA 2026-23 vom 2026-03-24
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-23/
• Mozilla Foundation Security Advisory MFSA 2026-24 vom 2026-03-24
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-24/
• openSUSE Security Update OPENSUSE-SU-2026:10413-1 vom 2026-03-25
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y7M6NU74R4Q7BLCQHUTUH3DFSFTPCPKT/
• Debian Security Advisory DSA-6178 vom 2026-03-25
  https://lists.debian.org/debian-security-announce/2026/msg00087.html
• Red Hat Security Advisory RHSA-2026:5932 vom 2026-03-26
  https://access.redhat.com/errata/RHSA-2026:5932
• Red Hat Security Advisory RHSA-2026:5931 vom 2026-03-26
  https://access.redhat.com/errata/RHSA-2026:5931
• Red Hat Security Advisory RHSA-2026:5930 vom 2026-03-26
  https://access.redhat.com/errata/RHSA-2026:5930
• Debian Security Advisory DSA-6179 vom 2026-03-26
  https://lists.debian.org/debian-security-announce/2026/msg00088.html
• Debian Security Advisory DLA-4510 vom 2026-03-26
  https://lists.debian.org/debian-lts-announce/2026/03/msg00014.html
• Debian Security Advisory DLA-4511 vom 2026-03-26
  https://lists.debian.org/debian-lts-announce/2026/03/msg00015.html
• SUSE Security Update SUSE-SU-2026:1126-1 vom 2026-03-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/025023.html
• SUSE Security Update SUSE-SU-2026:1127-1 vom 2026-03-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/025022.html
• Oracle Linux Security Advisory ELSA-2026-5930 vom 2026-03-27
  https://linux.oracle.com/errata/ELSA-2026-5930.html
• Oracle Linux Security Advisory ELSA-2026-5931 vom 2026-03-27
  https://linux.oracle.com/errata/ELSA-2026-5931.html
• Oracle Linux Security Advisory ELSA-2026-5932 vom 2026-03-27
  https://linux.oracle.com/errata/ELSA-2026-5932.html
• Red Hat Security Advisory RHSA-2026:6188 vom 2026-03-30
  https://access.redhat.com/errata/RHSA-2026:6188
• Oracle Linux Security Advisory ELSA-2026-6188 vom 2026-03-31
  https://linux.oracle.com/errata/ELSA-2026-6188.html
• openSUSE Security Update OPENSUSE-SU-2026:10447-1 vom 2026-03-31
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ELMKS2KLVJGOTFRHFX4CFYYGKJCR3ZFX/
• Red Hat Security Advisory RHSA-2026:6342 vom 2026-04-01
  https://access.redhat.com/errata/RHSA-2026:6342
• Oracle Linux Security Advisory ELSA-2026-6342 vom 2026-04-01
  https://linux.oracle.com/errata/ELSA-2026-6342.html
• SUSE Security Update SUSE-SU-2026:1163-1 vom 2026-04-01
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025116.html
• openSUSE Security Update OPENSUSE-SU-2026:10458-1 vom 2026-04-01
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YYCV757JWWKCAIP63ZNZ7UWNGGZJPRIV/
• Oracle Linux Security Advisory ELSA-2026-6342 vom 2026-04-01
  http://linux.oracle.com/errata/ELSA-2026-6342.html
• Rocky Linux Security Advisory RLSA-2026:5932 vom 2026-04-07
  https://errata.build.resf.org/RLSA-2026:5932
• Rocky Linux Security Advisory RLSA-2026:5930 vom 2026-04-07
  https://errata.build.resf.org/RLSA-2026:5930
• Rocky Linux Security Advisory RLSA-2026:6188 vom 2026-04-07
  https://errata.build.resf.org/RLSA-2026:6188
• Red Hat Security Advisory RHSA-2026:6917 vom 2026-04-08
  https://access.redhat.com/errata/RHSA-2026:6917
• Oracle Linux Security Advisory ELSA-2026-6917 vom 2026-04-08
  https://linux.oracle.com/errata/ELSA-2026-6917.html
• SUSE Security Update SUSE-SU-2026:20978-1 vom 2026-04-09
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025184.html
• Rocky Linux Security Advisory RLSA-2026:5931 vom 2026-04-09
  https://errata.build.resf.org/RLSA-2026:5931
• Rocky Linux Security Advisory RLSA-2026:6342 vom 2026-04-09
  https://errata.build.resf.org/RLSA-2026:6342
• Rocky Linux Security Advisory RLSA-2026:6917 vom 2026-04-12
  https://errata.build.resf.org/RLSA-2026:6917
• Red Hat Security Advisory RHSA-2026:7843 vom 2026-04-13
  https://access.redhat.com/errata/RHSA-2026:7843
• Red Hat Security Advisory RHSA-2026:7839 vom 2026-04-13
  https://access.redhat.com/errata/RHSA-2026:7839
• Red Hat Security Advisory RHSA-2026:7840 vom 2026-04-13
  https://access.redhat.com/errata/RHSA-2026:7840
• Red Hat Security Advisory RHSA-2026:7841 vom 2026-04-13
  https://access.redhat.com/errata/RHSA-2026:7841
• Red Hat Security Advisory RHSA-2026:7842 vom 2026-04-13
  https://access.redhat.com/errata/RHSA-2026:7842
• Red Hat Security Advisory RHSA-2026:7838 vom 2026-04-13
  https://access.redhat.com/errata/RHSA-2026:7838
• Red Hat Security Advisory RHSA-2026:7837 vom 2026-04-13
  https://access.redhat.com/errata/RHSA-2026:7837
• Red Hat Security Advisory RHSA-2026:7845 vom 2026-04-13
  https://access.redhat.com/errata/RHSA-2026:7845
• Red Hat Security Advisory RHSA-2026:7858 vom 2026-04-13
  https://access.redhat.com/errata/RHSA-2026:7858
• Amazon Linux Security Advisory ALAS2FIREFOX-2026-056 vom 2026-04-14
  https://alas.aws.amazon.com/AL2/ALAS2FIREFOX-2026-056.html
• Amazon Linux Security Advisory ALAS2-2026-3241 vom 2026-04-14
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3241.html
• Red Hat Security Advisory RHSA-2026:8284 vom 2026-04-15
  https://access.redhat.com/errata/RHSA-2026:8284
• Red Hat Security Advisory RHSA-2026:8285 vom 2026-04-15
  https://access.redhat.com/errata/RHSA-2026:8285
• Red Hat Security Advisory RHSA-2026:8287 vom 2026-04-15
  https://access.redhat.com/errata/RHSA-2026:8287
• Red Hat Security Advisory RHSA-2026:8288 vom 2026-04-15
  https://access.redhat.com/errata/RHSA-2026:8288
• Red Hat Security Advisory RHSA-2026:8289 vom 2026-04-15
  https://access.redhat.com/errata/RHSA-2026:8289
• Red Hat Security Advisory RHSA-2026:8290 vom 2026-04-15
  https://access.redhat.com/errata/RHSA-2026:8290
• Red Hat Security Advisory RHSA-2026:8315 vom 2026-04-15
  https://access.redhat.com/errata/RHSA-2026:8315
• Red Hat Security Advisory RHSA-2026:8286 vom 2026-04-15
  https://access.redhat.com/errata/RHSA-2026:8286
• Red Hat Security Advisory RHSA-2026:8427 vom 2026-04-16
  https://access.redhat.com/errata/RHSA-2026:8427
• Red Hat Security Advisory RHSA-2026:8850 vom 2026-04-20
  https://access.redhat.com/errata/RHSA-2026:8850
• openSUSE Security Update OPENSUSE-SU-2026:20664-1 vom 2026-05-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VYPE5WKCCCIM4I2XJFAO2S7QLLSWQCSW/
• Oracle Linux Security Advisory ELSA-2026-8427 vom 2026-06-11
  https://linux.oracle.com/errata/ELSA-2026-8427.html
• Oracle Linux Security Advisory ELSA-2026-13977 vom 2026-06-11
  https://linux.oracle.com/errata/ELSA-2026-13977.html
• Oracle Linux Security Advisory ELSA-2026-22708 vom 2026-06-15
  https://linux.oracle.com/errata/ELSA-2026-22708.html
• Oracle Linux Security Advisory ELSA-2026-19704 vom 2026-06-16
  https://linux.oracle.com/errata/ELSA-2026-19704.html
• Oracle Linux Security Advisory ELSA-2026-24983 vom 2026-06-30
  https://linux.oracle.com/errata/ELSA-2026-24983.html
• Oracle Linux Security Advisory ELSA-2026-26551 vom 2026-06-30
  https://linux.oracle.com/errata/ELSA-2026-26551.html
• Oracle Linux Security Advisory ELSA-2026-54248 vom 2026-09-22
  https://linux.oracle.com/errata/ELSA-2026-54248.html
• Oracle Linux Security Advisory ELSA-2026-65442 vom 2026-11-05
  https://linux.oracle.com/errata/ELSA-2026-65442-0.html
• Oracle Linux Security Advisory ELSA-2026-83496 vom 2026-11-06
  https://linux.oracle.com/errata/ELSA-2026-83496.html
• Oracle Linux Security Advisory ELSA-2026-76741 vom 2026-11-06
  https://linux.oracle.com/errata/ELSA-2026-76741.html