Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 42

• Critical 9.8
  CVE-2026-12293

  Use-after-free in the Graphics: WebGPU component

  Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jun 16, 2026
• Critical 9.6
  CVE-2026-12294

  Sandbox escape in the DOM: Workers component

  Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Critical 9.6
  CVE-2026-12295 Public exploit

  Sandbox escape in the DOM: Navigation component

  Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Critical 9.6
  CVE-2026-12296

  Sandbox escape in the Security: Process Sandboxing component

  Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Critical 9.6
  CVE-2026-12297

  Sandbox escape due to incorrect boundary conditions in the Networking component

  Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Critical 9.1
  CVE-2026-12304

  Same-origin policy bypass in the Networking: Cookies component

  Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Critical 9.1
  CVE-2026-12315

  Mitigation bypass in the DOM: Security component

  Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Critical 9.1
  CVE-2026-12316

  Mitigation bypass in the DOM: Security component

  Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jun 16, 2026
• High 8.8
  CVE-2026-12289

  Privilege escalation in the Graphics: WebRender component

  Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• High 8.8
  CVE-2026-12291

  Use-after-free in the Networking: HTTP component

  Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• High 8.1
  CVE-2026-12290

  Memory safety bug fixed in Thunderbird 152

  Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• High 8.1
  CVE-2026-12292

  Incorrect boundary conditions in the Web Audio component

  Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• High 8.1
  CVE-2026-12326

  Memory safety bugs fixed in Firefox 152 and Thunderbird 152

  Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefo…

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jun 16, 2026
• High 8.1
  CVE-2026-12327

  Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152

  Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary …

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• High 8.1
  CVE-2026-12328

  Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152

  Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploit…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• High 7.5
  CVE-2026-12305

  Memory safety bug fixed in Thunderbird 152

  Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• High 7.5
  CVE-2026-12310

  Memory safety bug fixed in Thunderbird 152

  Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• High 7.5
  CVE-2026-12312

  Memory safety bug fixed in Thunderbird 152

  Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• High 7.5
  CVE-2026-12314

  Memory safety bug fixed in Thunderbird 152

  Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• High 7.5
  CVE-2026-12317

  Memory safety bug fixed in Thunderbird 152

  Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jun 16, 2026
• High 7.3
  CVE-2026-12318

  Incorrect boundary conditions in the Libraries component in NSS

  Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• High 7.3
  CVE-2026-12324

  Incorrect boundary conditions in the Graphics: CanvasWebGL component

  Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Medium 6.5
  CVE-2026-12302

  Mitigation bypass in the DOM: Security component

  Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Medium 6.5
  CVE-2026-12309

  Memory safety bug fixed in Thunderbird 152

  Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Medium 6.5
  CVE-2026-12319

  Denial-of-service in the Audio/Video: Playback component

  Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jun 16, 2026
• Medium 6.5
  CVE-2026-12325

  Denial-of-service in the Graphics: ImageLib component

  Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Medium 5.4
  CVE-2026-12298

  Memory safety bug fixed in Thunderbird 152

  Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Medium 5.4
  CVE-2026-12299

  JIT miscompilation in the DOM: Core & HTML component

  JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Medium 5.4
  CVE-2026-12321

  JIT miscompilation in the JavaScript: WebAssembly component

  JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jun 16, 2026
• Medium 5.4
  CVE-2026-12322

  Clickjacking issue in the Widget: Gtk component

  Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jun 16, 2026
• Medium 5.4
  CVE-2026-12323

  Spoofing issue in the DOM: Core & HTML component

  Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jun 16, 2026
• Medium 5.4
  CVE-2026-12330

  Incorrect boundary conditions in the Internationalization component

  Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 140.12, Firefox ESR 115.37, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Medium 5.3
  CVE-2026-12300

  Memory safety bug fixed in Thunderbird 152

  Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jun 16, 2026
• Medium 5.3
  CVE-2026-12301

  Memory safety bug fixed in Thunderbird 152

  Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jun 16, 2026
• Medium 5.3
  CVE-2026-12306

  Memory safety bug fixed in Thunderbird 152

  Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Medium 5.3
  CVE-2026-12307

  Memory safety bug fixed in Thunderbird 152

  Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Medium 5.3
  CVE-2026-12308

  Memory safety bug fixed in Thunderbird 152

  Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Medium 5.3
  CVE-2026-12329

  Memory safety bug fixed in Thunderbird ESR 140.12

  Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Medium 4.7
  CVE-2026-12311

  Information disclosure, sandbox escape in the Security: Process Sandboxing component

  Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Medium 4.7
  CVE-2026-12313

  Information disclosure, sandbox escape in the Security: Process Sandboxing component

  Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jun 16, 2026
• Medium 4.3
  CVE-2026-12303

  Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component

  Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jun 16, 2026
• Medium 4.3
  CVE-2026-12320

  Information disclosure in the Password Manager component

  Information disclosure in the Password Manager component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jun 16, 2026

Revision history

1. 2026-08-16 #23

   Neue Updates von SUSE aufgenommen

2. 2026-07-21 #22

   Neue Updates von Debian aufgenommen

3. 2026-07-19 #21

   Neue Updates von Oracle Linux aufgenommen

4. 2026-07-16 #20

   Neue Updates von Oracle Linux aufgenommen

5. 2026-07-14 #19

   Neue Updates von Red Hat aufgenommen

6. 2026-07-13 #18

   Neue Updates von Red Hat aufgenommen

7. 2026-07-12 #17

   Neue Updates von Red Hat aufgenommen

8. 2026-07-09 #16

   Neue Updates von SUSE und Red Hat aufgenommen

9. 2026-07-08 #15

   Neue Updates von IGEL und Red Hat aufgenommen

10. 2026-07-07 #14

    Neue Updates von Amazon aufgenommen

11. 2026-07-06 #13

    Neue Updates von Red Hat aufgenommen

12. 2026-07-05 #12

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

13. 2026-07-01 #11

    Neue Updates von Oracle Linux und SUSE aufgenommen

14. 2026-06-29 #10

    Neue Updates von Ubuntu aufgenommen

15. 2026-06-28 #9

    Neue Updates von Red Hat, Rocky Enterprise Software Foundation und Oracle Linux aufgenommen

16. 2026-06-25 #8

    Neue Updates von Red Hat aufgenommen

17. 2026-06-24 #7

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

18. 2026-06-23 #6

    Neue Updates von SUSE aufgenommen

19. 2026-06-22 #5

    Neue Updates von Oracle Linux aufgenommen

20. 2026-06-21 #4

    Neue Updates von Red Hat und openSUSE aufgenommen

21. 2026-06-18 #3

    Neue Updates von Debian aufgenommen

22. 2026-06-17 #2

    Neue Updates von Debian aufgenommen

23. 2026-06-16 #1

    Initiale Fassung

References

• Mozilla Security Advisory mfsa2026-57 vom 2026-06-16
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/
• Mozilla Security Advisory mfsa2026-58 vom 2026-06-16
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/
• Mozilla Security Advisory mfsa2026-59 vom 2026-06-16
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-59/
• Mozilla Security Advisory mfsa2026-60 vom 2026-06-16
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-60/
• Mozilla Security Advisory mfsa2026-61 vom 2026-06-16
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/
• Debian Security Advisory DSA-6350 vom 2026-06-17
  https://security-tracker.debian.org/tracker/DSA-6350-1
• Debian Security Advisory DLA-4636 vom 2026-06-19
  https://lists.debian.org/debian-lts-announce/2026/06/msg00025.html
• Debian Security Advisory DSA-6351 vom 2026-06-19
  https://security-tracker.debian.org/tracker/DSA-6351-1
• Debian Security Advisory DLA-4635 vom 2026-06-19
  https://lists.debian.org/debian-lts-announce/2026/06/msg00024.html
• Red Hat Security Advisory RHSA-2026:27734 vom 2026-06-22
  https://access.redhat.com/errata/RHSA-2026:27734
• Red Hat Security Advisory RHSA-2026:27733 vom 2026-06-22
  https://access.redhat.com/errata/RHSA-2026:27733
• Red Hat Security Advisory RHSA-2026:27717 vom 2026-06-22
  https://access.redhat.com/errata/RHSA-2026:27717
• openSUSE Security Update OPENSUSE-SU-2026:11052-1 vom 2026-06-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GOWGTLFEAFM6JGKSBFCMH52SSW6LKRJO/
• Oracle Linux Security Advisory ELSA-2026-27717 vom 2026-06-22
  https://linux.oracle.com/errata/ELSA-2026-27717.html
• SUSE Security Update SUSE-SU-2026:2583-1 vom 2026-06-23
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026963.html
• SUSE Security Update SUSE-SU-2026:2582-1 vom 2026-06-23
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026964.html
• Rocky Linux Security Advisory RLSA-2026:27717 vom 2026-06-25
  https://errata.build.resf.org/RLSA-2026:27717
• Rocky Linux Security Advisory RLSA-2026:27733 vom 2026-06-24
  https://errata.build.resf.org/RLSA-2026:27733
• Oracle Linux Security Advisory ELSA-2026-27734 vom 2026-06-25
  https://linux.oracle.com/errata/ELSA-2026-27734.html
• Red Hat Security Advisory RHSA-2026:29940 vom 2026-06-25
  https://access.redhat.com/errata/RHSA-2026:29940
• Red Hat Security Advisory RHSA-2026:30846 vom 2026-06-29
  https://access.redhat.com/errata/RHSA-2026:30846
• Rocky Linux Security Advisory RLSA-2026:29940 vom 2026-06-26
  https://errata.build.resf.org/RLSA-2026:29940
• Oracle Linux Security Advisory ELSA-2026-29940 vom 2026-06-27
  http://linux.oracle.com/errata/ELSA-2026-29940.html
• Ubuntu Security Notice USN-8481-1 vom 2026-06-29
  https://ubuntu.com/security/notices/USN-8481-1
• openSUSE Security Update OPENSUSE-SU-2026:21043-1 vom 2026-06-30
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4F7N532I74FSECPGA3I7U73DSXMGJQO5/
• openSUSE Security Update OPENSUSE-SU-2026:21168-1 vom 2026-06-30
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HQOUZ4FJUQQK7WLZSNIZJXU73B7UNF3A/
• Red Hat Security Advisory RHSA-2026:33445 vom 2026-06-30
  https://access.redhat.com/errata/RHSA-2026:33445
• Oracle Linux Security Advisory ELSA-2026-33445 vom 2026-07-01
  https://linux.oracle.com/errata/ELSA-2026-33445.html
• SUSE Security Update SUSE-SU-2026:22351-1 vom 2026-07-01
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027130.html
• Rocky Linux Security Advisory RLSA-2026:30846 vom 2026-07-05
  https://errata.build.resf.org/RLSA-2026:30846
• Rocky Linux Security Advisory RLSA-2026:33445 vom 2026-07-04
  https://errata.build.resf.org/RLSA-2026:33445
• Red Hat Security Advisory RHSA-2026:36103 vom 2026-07-07
  https://access.redhat.com/errata/RHSA-2026:36103
• Red Hat Security Advisory RHSA-2026:36100 vom 2026-07-07
  https://access.redhat.com/errata/RHSA-2026:36100
• Red Hat Security Advisory RHSA-2026:36101 vom 2026-07-07
  https://access.redhat.com/errata/RHSA-2026:36101
• Red Hat Security Advisory RHSA-2026:36102 vom 2026-07-07
  https://access.redhat.com/errata/RHSA-2026:36102
• Amazon Linux Security Advisory ALAS2FIREFOX-2026-062 vom 2026-07-08
  https://alas.aws.amazon.com/AL2/ALAS2FIREFOX-2026-062.html
• Amazon Linux Security Advisory ALAS2-2026-3795 vom 2026-07-08
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3795.html
• IGEL Security Notice ISN-2026-27 vom 2026-07-09
  https://kb.igel.com/en/security-safety/current/isn-2026-27-firefox-esr-vulnerabilities
• Red Hat Security Advisory RHSA-2026:37210 vom 2026-07-09
  https://access.redhat.com/errata/RHSA-2026:37210
• SUSE Security Update SUSE-SU-2026:2814-1 vom 2026-07-09
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027338.html
• Red Hat Security Advisory RHSA-2026:37391 vom 2026-07-09
  https://access.redhat.com/errata/RHSA-2026:37391
• SUSE Security Update SUSE-SU-2026:2582-2 vom 2026-07-09
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027337.html
• Red Hat Security Advisory RHSA-2026:38506 vom 2026-07-13
  https://access.redhat.com/errata/RHSA-2026:38506
• Red Hat Security Advisory RHSA-2026:38751 vom 2026-07-13
  https://access.redhat.com/errata/RHSA-2026:38751
• SUSE Security Update SUSE-SU-2026:2852-1 vom 2026-07-13
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027389.html
• Red Hat Security Advisory RHSA-2026:39011 vom 2026-07-13
  https://access.redhat.com/errata/RHSA-2026:39011
• Red Hat Security Advisory RHSA-2026:39142 vom 2026-07-14
  https://access.redhat.com/errata/RHSA-2026:39142
• Red Hat Security Advisory RHSA-2026:39141 vom 2026-07-14
  https://access.redhat.com/errata/RHSA-2026:39141
• Red Hat Security Advisory RHSA-2026:39706 vom 2026-07-15
  https://access.redhat.com/errata/RHSA-2026:39706
• Oracle Linux Security Advisory ELSA-2026-30846 vom 2026-07-17
  https://linux.oracle.com/errata/ELSA-2026-30846.html
• Oracle Linux Security Advisory ELSA-2026-27733 vom 2026-07-17
  https://linux.oracle.com/errata/ELSA-2026-27733.html
• Debian Security Advisory DLA-4694 vom 2026-07-22
  https://lists.debian.org/debian-lts-announce/2026/07/msg00036.html
• SUSE Security Update SUSE-SU-2026:23115-1 vom 2026-08-14
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028328.html
• SUSE Security Update SUSE-SU-2026:23137-1 vom 2026-08-14
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028310.html