Mozilla Thunderbird, Firefox ESR und Firefox: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 43

• Critical 9.8
  CVE-2026-6748

  Uninitialized memory in the Audio/Video: Web Codecs component

  Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• Critical 9.8
  CVE-2026-6760

  Mitigation bypass in the Networking: Cookies component

  Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• Critical 9.8
  CVE-2026-6768

  Mitigation bypass in the Networking: Cookies component

  Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• Critical 9.8
  CVE-2026-6771

  Mitigation bypass in the DOM: Security component

  Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 8.8
  CVE-2026-2781

  Integer overflow in the Libraries component in NSS

  Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Feb 24, 2026
• High 8.8
  CVE-2026-6750

  Privilege escalation in the Graphics: WebRender component

  Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 8.8
  CVE-2026-6761

  Privilege escalation in the Networking component

  Privilege escalation in the Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 8.8
  CVE-2026-6769

  Privilege escalation in the Debugger component

  Privilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 7.8
  CVE-2026-6776

  Incorrect boundary conditions in the WebRTC: Networking component

  Incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-33626 Public exploit Scanner template EPSS 45%

  LMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image Loading

  LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions prior to 0.12.3 have a Server-Side Request Forgery (SSRF) vulnerability in LMDeploy's vision-language module. The `load_image()` function in `lmdeploy/vl/utils.py` f…

  InternLM lmdeploy lmdeploy PyPI
  Apr 20, 2026
• High 7.5
  CVE-2026-6746

  Use-after-free in the DOM: Core & HTML component

  Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6747

  Use-after-free in the WebRTC component

  Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6749

  Information disclosure due to uninitialized memory in the Graphics: Canvas2D component

  Information disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6754

  Use-after-free in the JavaScript Engine component

  Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6756

  Mitigation bypass in Firefox for Android

  Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150.

  Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6758

  Use-after-free in the JavaScript: WebAssembly component

  Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6759

  Use-after-free in the Widget: Cocoa component

  Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6766

  Incorrect boundary conditions in the Libraries component in NSS

  Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6772

  Incorrect boundary conditions in the Libraries component in NSS

  Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6773

  Denial-of-service due to integer overflow in the Graphics: WebGPU component

  Denial-of-service due to integer overflow in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6780

  Denial-of-service in the Audio/Video: Playback component

  Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6781

  Denial-of-service in the Audio/Video: Playback component

  Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6782

  Information disclosure in the IP Protection component

  Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6784

  Memory safety bugs fixed in Firefox 150 and Thunderbird 150

  Memory safety bugs present in Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefo…

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6785

  Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

  Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-6786

  Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

  Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary co…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 7.3
  CVE-2026-6751

  Uninitialized memory in the Audio/Video: Web Codecs component

  Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 7.3
  CVE-2026-6752

  Incorrect boundary conditions in the WebRTC component

  Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• High 7.3
  CVE-2026-6753

  Incorrect boundary conditions in the WebRTC component

  Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• Medium 6.5
  CVE-2026-6755

  Mitigation bypass in the DOM: postMessage component

  Mitigation bypass in the DOM: postMessage component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• Medium 6.5
  CVE-2026-6763

  Mitigation bypass in the File Handling component

  Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• Medium 6.5
  CVE-2026-6764

  Incorrect boundary conditions in the DOM: Device Interfaces component

  Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• Medium 6.5
  CVE-2026-6770 Public exploit

  Other issue in the Storage: IndexedDB component

  Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• Medium 6.3
  CVE-2026-6757

  Invalid pointer in the JavaScript: WebAssembly component

  Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• Medium 6.3
  CVE-2026-6762

  Spoofing issue in the DOM: Core & HTML component

  Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• Medium 5.4
  CVE-2026-6774

  Mitigation bypass in the DOM: Security component

  Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• Medium 5.3
  CVE-2026-6765 Public exploit

  Information disclosure in the Form Autofill component

  Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• Medium 5.3
  CVE-2026-6767

  Other issue in the Libraries component in NSS

  Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Apr 21, 2026
• Medium 5.3
  CVE-2026-6775

  Incorrect boundary conditions in the WebRTC component

  Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• Medium 5.3
  CVE-2026-6777

  Other issue in the Networking: DNS component

  Other issue in the Networking: DNS component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• Medium 5.3
  CVE-2026-6778

  Invalid pointer in the Audio/Video: Playback component

  Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• Medium 5.3
  CVE-2026-6779

  Other issue in the JavaScript Engine component

  Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026
• Medium 5.3
  CVE-2026-6783

  Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component

  Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Apr 21, 2026

Revision history

1. 2026-11-12 #30

   Neue Updates von SUSE aufgenommen

2. 2026-11-11 #29

   Neue Updates von SUSE aufgenommen

3. 2026-11-08 #28

   Neue Updates von Oracle Linux aufgenommen

4. 2026-11-05 #27

   Neue Updates von Oracle Linux aufgenommen

5. 2026-09-21 #26

   Neue Updates von Oracle Linux aufgenommen

6. 2026-07-21 #25

   Neue Updates von Debian aufgenommen

7. 2026-07-20 #24

   Neue Updates von Oracle Linux aufgenommen

8. 2026-06-30 #23

   Neue Updates von Oracle Linux aufgenommen

9. 2026-06-28 #22

   Neue Updates von Oracle Linux aufgenommen

10. 2026-06-15 #21

    Neue Updates von Oracle Linux aufgenommen

11. 2026-06-11 #20

    Neue Updates von Oracle Linux aufgenommen

12. 2026-06-10 #19

    Neue Updates von Oracle Linux aufgenommen

13. 2026-05-26 #18

    Neue Updates von Amazon aufgenommen

14. 2026-05-21 #17

    Neue Updates von Debian aufgenommen

15. 2026-05-20 #16

    Neue Updates von Red Hat aufgenommen

16. 2026-05-19 #15

    Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen

17. 2026-05-14 #14

    Neue Updates von Red Hat und Rocky Enterprise Software Foundation, sowie PoC für CVE-2026-33626 aufgenommen

18. 2026-05-11 #13

    Neue Updates von Oracle Linux aufgenommen

19. 2026-05-10 #12

    Neue Updates von Red Hat aufgenommen

20. 2026-05-07 #11

    Neue Updates von SUSE und Rocky Enterprise Software Foundation aufgenommen

21. 2026-05-06 #10

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

22. 2026-05-05 #9

    Neue Updates von Oracle Linux aufgenommen

23. 2026-05-04 #8

    Neue Updates von Red Hat und openSUSE aufgenommen

24. 2026-05-03 #7

    Neue Updates von Oracle Linux, Rocky Enterprise Software Foundation und Red Hat aufgenommen

25. 2026-04-28 #6

    Neue Updates von Rocky Enterprise Software Foundation und SUSE aufgenommen

References

• Mozilla Security Advisory mfsa2026-30 vom 2026-04-21
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-30/
• Mozilla Security Advisory mfsa2026-31 vom 2026-04-21
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-31/
• Mozilla Security Advisory mfsa2026-32 vom 2026-04-21
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-32
• Mozilla Security Advisory mfsa2026-33 vom 2026-04-21
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-33/
• Mozilla Security Advisory mfsa2026-34 vom 2026-04-21
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-34/
• Debian Security Advisory DLA-4546 vom 2026-04-23
  https://lists.debian.org/debian-lts-announce/2026/04/msg00027.html
• National Vulnerability Database CVE-2026-6748 vom 2026-04-22
  https://nvd.nist.gov/vuln/detail/CVE-2026-6748
• National Vulnerability Database CVE-2026-6750 vom 2026-04-22
  https://nvd.nist.gov/vuln/detail/CVE-2026-6750
• openSUSE Security Update OPENSUSE-SU-2026:10610-1 vom 2026-04-25
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6VX2E6MLQKO7DPWQ4ZZHUP2YTTOARCJ2/
• Debian Security Advisory DSA-6229 vom 2026-04-24
  https://security-tracker.debian.org/tracker/DSA-6229-1
• Debian Security Advisory DLA-4549 vom 2026-04-26
  https://lists.debian.org/debian-lts-announce/2026/04/msg00030.html
• Red Hat Security Advisory RHSA-2026:10757 vom 2026-04-27
  https://access.redhat.com/errata/RHSA-2026:10757
• Oracle Linux Security Advisory ELSA-2026-10767 vom 2026-04-28
  https://linux.oracle.com/errata/ELSA-2026-10767.html
• Red Hat Security Advisory RHSA-2026:10767 vom 2026-04-27
  https://access.redhat.com/errata/RHSA-2026:10767
• openSUSE Security Update OPENSUSE-SU-2026:20621-1 vom 2026-04-27
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6A4NBNRGRAA5IER7QAALUZTRHLEXIBXW/
• Oracle Linux Security Advisory ELSA-2026-10757 vom 2026-04-28
  https://linux.oracle.com/errata/ELSA-2026-10757.html
• Red Hat Security Advisory RHSA-2026:10766 vom 2026-04-27
  https://access.redhat.com/errata/RHSA-2026:10766
• Oracle Linux Security Advisory ELSA-2026-10766 vom 2026-04-28
  https://linux.oracle.com/errata/ELSA-2026-10766.html
• Rocky Linux Security Advisory RLSA-2026:10767 vom 2026-04-28
  https://errata.build.resf.org/RLSA-2026:10767
• Rocky Linux Security Advisory RLSA-2026:10757 vom 2026-04-28
  https://errata.build.resf.org/RLSA-2026:10757
• SUSE Security Update SUSE-SU-2026:21383-1 vom 2026-04-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025725.html
• SUSE Security Update SUSE-SU-2026:1649-1 vom 2026-04-29
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025757.html
• SUSE Security Update SUSE-SU-2026:1650-1 vom 2026-04-29
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025756.html
• Oracle Linux Security Advisory ELSA-2026-12285 vom 2026-05-01
  https://linux.oracle.com/errata/ELSA-2026-12285.html
• Rocky Linux Security Advisory RLSA-2026:10766 vom 2026-04-30
  https://errata.build.resf.org/RLSA-2026:10766
• Red Hat Security Advisory RHSA-2026:12285 vom 2026-04-30
  https://access.redhat.com/errata/RHSA-2026:12285
• Red Hat Security Advisory RHSA-2026:13537 vom 2026-05-04
  https://access.redhat.com/errata/RHSA-2026:13537
• openSUSE Security Update OPENSUSE-SU-2026:20664-1 vom 2026-05-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VYPE5WKCCCIM4I2XJFAO2S7QLLSWQCSW/
• Oracle Linux Security Advisory ELSA-2026-13537 vom 2026-05-06
  https://linux.oracle.com/errata/ELSA-2026-13537.html
• Rocky Linux Security Advisory RLSA-2026:13537 vom 2026-05-07
  https://errata.build.resf.org/RLSA-2026:13537
• SUSE Security Update SUSE-SU-2026:1741-1 vom 2026-05-07
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/025930.html
• Rocky Linux Security Advisory RLSA-2026:12285 vom 2026-05-07
  https://errata.build.resf.org/RLSA-2026:12285
• Red Hat Security Advisory RHSA-2026:15892 vom 2026-05-11
  https://access.redhat.com/errata/RHSA-2026:15892
• Oracle Linux Security Advisory ELSA-2026-15892 vom 2026-05-11
  https://linux.oracle.com/errata/ELSA-2026-15892.html
• Red Hat Security Advisory RHSA-2026:17689 vom 2026-05-14
  https://access.redhat.com/errata/RHSA-2026:17689
• Red Hat Security Advisory RHSA-2026:17688 vom 2026-05-15
  https://access.redhat.com/errata/RHSA-2026:17688
• Red Hat Security Advisory RHSA-2026:17687 vom 2026-05-14
  https://access.redhat.com/errata/RHSA-2026:17687
• Red Hat Security Advisory RHSA-2026:17477 vom 2026-05-14
  https://access.redhat.com/errata/RHSA-2026:17477
• Rocky Linux Security Advisory RLSA-2026:15892 vom 2026-05-13
  https://errata.build.resf.org/RLSA-2026:15892
• Red Hat Security Advisory RHSA-2026:17690 vom 2026-05-14
  https://access.redhat.com/errata/RHSA-2026:17690
• PoC CVE-2026-33626 vom 2026-05-14
  https://github.com/rootdirective-sec/CVE-2026-33626-Lab
• Red Hat Security Advisory RHSA-2026:19466 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19466
• Red Hat Security Advisory RHSA-2026:19041 vom 2026-05-19
  https://access.redhat.com/errata/RHSA-2026:19041
• Red Hat Security Advisory RHSA-2026:19201 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19201
• Red Hat Security Advisory RHSA-2026:19131 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19131
• Red Hat Security Advisory RHSA-2026:19461 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19461
• Red Hat Security Advisory RHSA-2026:19462 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19462
• Red Hat Security Advisory RHSA-2026:19465 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19465
• Red Hat Security Advisory RHSA-2026:19467 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19467
• Rocky Linux Security Advisory RLSA-2026:19201 vom 2026-05-20
  https://errata.build.resf.org/RLSA-2026:19201
• Red Hat Security Advisory RHSA-2026:19348 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19348
• Red Hat Security Advisory RHSA-2026:19464 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19464
• Red Hat Security Advisory RHSA-2026:19468 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19468
• Red Hat Security Advisory RHSA-2026:19542 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19542
• Red Hat Security Advisory RHSA-2026:19469 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19469
• Red Hat Security Advisory RHSA-2026:19463 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19463
• Red Hat Security Advisory RHSA-2026:19655 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19655
• Red Hat Security Advisory RHSA-2026:19704 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19704
• Debian Security Advisory DSA-6290 vom 2026-05-22
  https://lists.debian.org/debian-security-announce/2026/msg00201.html
• Amazon Linux Security Advisory ALAS2-2026-3304 vom 2026-05-26
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3304.html
• Oracle Linux Security Advisory ELSA-2026-3984 vom 2026-06-11
  https://linux.oracle.com/errata/ELSA-2026-3984.html
• Oracle Linux Security Advisory ELSA-2026-8427 vom 2026-06-11
  https://linux.oracle.com/errata/ELSA-2026-8427.html
• Oracle Linux Security Advisory ELSA-2026-13977 vom 2026-06-11
  https://linux.oracle.com/errata/ELSA-2026-13977.html
• Oracle Linux Security Advisory ELSA-2026-22708 vom 2026-06-15
  https://linux.oracle.com/errata/ELSA-2026-22708.html
• Oracle Linux Security Advisory ELSA-2026-19704 vom 2026-06-16
  https://linux.oracle.com/errata/ELSA-2026-19704.html
• Oracle Linux Security Advisory ELSA-2026-19348 vom 2026-06-27
  https://linux.oracle.com/errata/ELSA-2026-19348.html
• Oracle Linux Security Advisory ELSA-2026-26551 vom 2026-06-30
  https://linux.oracle.com/errata/ELSA-2026-26551.html
• Oracle Linux Security Advisory ELSA-2026-24983 vom 2026-06-30
  https://linux.oracle.com/errata/ELSA-2026-24983.html
• Oracle Linux Security Advisory ELSA-2026-19131 vom 2026-07-20
  https://linux.oracle.com/errata/ELSA-2026-19131.html
• Oracle Linux Security Advisory ELSA-2026-19131 vom 2026-07-20
  http://linux.oracle.com/errata/ELSA-2026-19131.html
• Debian Security Advisory DLA-4694 vom 2026-07-22
  https://lists.debian.org/debian-lts-announce/2026/07/msg00036.html
• Oracle Linux Security Advisory ELSA-2026-54248 vom 2026-09-22
  https://linux.oracle.com/errata/ELSA-2026-54248.html
• Oracle Linux Security Advisory ELSA-2026-65442 vom 2026-11-05
  https://linux.oracle.com/errata/ELSA-2026-65442-0.html
• Oracle Linux Security Advisory ELSA-2026-92363 vom 2026-11-06
  https://linux.oracle.com/errata/ELSA-2026-92363.html
• Oracle Linux Security Advisory ELSA-2026-83496 vom 2026-11-06
  https://linux.oracle.com/errata/ELSA-2026-83496.html
• Oracle Linux Security Advisory ELSA-2026-76741 vom 2026-11-06
  https://linux.oracle.com/errata/ELSA-2026-76741.html
• SUSE Security Update SUSE-SU-2026:24661-1 vom 2026-11-11
  https://lists.suse.com/pipermail/sle-security-updates/2026-November/030602.html
• SUSE Security Update SUSE-SU-2026:24704-1 vom 2026-11-12
  https://lists.suse.com/pipermail/sle-security-updates/2026-November/030637.html