Mozilla Firefox und Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 67

• Critical 10.0
  CVE-2026-16367

  Sandbox escape due to invalid pointer in the Disability Access APIs component

  Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16349

  Same-origin policy bypass in the DOM: Navigation component

  Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16350

  Incorrect boundary conditions in the Audio/Video: cubeb component

  Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16351

  Sandbox escape due to use-after-free in the DOM: Navigation component

  Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16352

  Sandbox escape due to use-after-free in the Disability Access APIs component

  Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16353

  Invalid pointer in the DOM: Bindings (WebIDL) component

  Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16355

  JIT miscompilation in the JavaScript Engine: JIT component

  JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16356

  Sandbox escape due to use-after-free in the Disability Access APIs component

  Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16357

  Incorrect boundary conditions in the Graphics component

  Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16358

  Site isolation issue in the Graphics: WebRender component

  Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16360

  Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153

  Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixe…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16361

  Memory safety bugs fixed in Thunderbird ESR 140.13

  Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox ESR 115…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16363

  JIT miscompilation in the JavaScript: WebAssembly component

  JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16368

  Incorrect boundary conditions in the JavaScript: WebAssembly component

  Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16369

  Integer overflow in the JavaScript: WebAssembly component

  Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16375

  Site isolation issue in the Networking: HTTP component

  Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16377

  Mitigation bypass in the PDF Viewer component

  Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16382

  Mitigation bypass in the DOM: Service Workers component

  Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16383

  Mitigation bypass in the DOM: Networking component

  Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16387

  Site isolation issue in the Networking component

  Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16388

  Sandbox escape in the DOM: Networking component

  Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16389

  Incorrect boundary conditions, integer overflow in the Libraries component in NSS

  Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16395

  Integer overflow in the Audio/Video component

  Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16402

  Integer overflow in the Graphics: ImageLib component

  Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16407

  Mitigation bypass in the DOM: Service Workers component

  Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16408

  Integer overflow in the Audio/Video: Playback component

  Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16410

  JIT miscompilation in the JavaScript Engine: JIT component

  JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16411

  Memory safety bugs fixed in Thunderbird 153

  Memory safety bugs present in Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153 and Thunde…

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.8
  CVE-2026-16412

  Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153

  Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixe…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.1
  CVE-2026-16359

  Incorrect boundary conditions in the Audio/Video: GMP component

  Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.1
  CVE-2026-16364

  Incorrect boundary conditions in the Audio/Video: Playback component

  Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.1
  CVE-2026-16370

  Mitigation bypass in the DOM: Networking component

  Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.1
  CVE-2026-16380

  Mitigation bypass in the Networking component

  Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.1
  CVE-2026-16381

  Same-origin policy bypass in the Networking: DNS component

  Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.1
  CVE-2026-16390

  Mitigation bypass in the Enterprise Policies component

  Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.1
  CVE-2026-16392

  JIT miscompilation in the JavaScript Engine: JIT component

  JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.1
  CVE-2026-16393

  Incorrect boundary conditions in the Graphics: WebGPU component

  Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.1
  CVE-2026-16394

  Mitigation bypass in the DOM: Security component

  Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Critical 9.1
  CVE-2026-16406

  Mitigation bypass in the Networking component

  Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• High 8.8
  CVE-2026-16362

  Use-after-free in the WebRTC: Audio/Video component

  Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• High 8.8
  CVE-2026-16365

  Privilege escalation in the DOM: Workers component

  Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153, Thunderbird 153, Firefox ESR 140.15, and Thunderbird 140.15.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• High 8.8
  CVE-2026-16366

  Privilege escalation in the DOM: Navigation component

  Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• High 8.8
  CVE-2026-16371

  Privilege escalation in the DOM: Navigation component

  Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, Thunderbird 140.13, Firefox ESR 140.15, and Thunderbird 140.15.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• High 8.8
  CVE-2026-16372

  Privilege escalation in the DOM: Content Processes component

  Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• High 8.8
  CVE-2026-16379

  Privilege escalation in the DOM: Content Processes component

  Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• High 8.8
  CVE-2026-16396

  Privilege escalation in WebExtensions

  Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• High 8.8
  CVE-2026-16401

  Privilege escalation in the Data Loss Prevention component

  Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• High 7.5
  CVE-2026-14899

  Off-by-one out of bounds read in MIME header parser for forwarding

  The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunder…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Jul 22, 2026
• High 7.5
  CVE-2026-16354

  Information disclosure in the Graphics: ImageLib component

  Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• High 7.5
  CVE-2026-16373

  Information disclosure in the Privacy component in Firefox for Android

  Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.

  Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu
  Jul 21, 2026
• High 7.5
  CVE-2026-16374

  Information disclosure in the Framework component in DevTools

  Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• High 7.5
  CVE-2026-16376

  Denial-of-service in the Graphics: WebGPU component

  Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• High 7.5
  CVE-2026-16378

  Other issue in the DOM: Copy & Paste and Drag & Drop component

  Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• High 7.5
  CVE-2026-16384

  Information disclosure due to uninitialized memory in the Graphics: WebGPU component

  Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• High 7.5
  CVE-2026-16385

  Information disclosure due to uninitialized memory in the Graphics: WebGPU component

  Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• High 7.5
  CVE-2026-16386

  Information disclosure due to uninitialized memory in the Graphics: WebGPU component

  Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• High 7.5
  CVE-2026-16391

  Information disclosure in the Storage: IndexedDB component

  Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• High 7.5
  CVE-2026-16398

  Site isolation issue in the Graphics component

  Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• High 7.5
  CVE-2026-16399

  Site isolation issue in the DOM: Navigation component

  Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• High 7.5
  CVE-2026-16400

  Information disclosure in the DOM: Security component

  Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• High 7.5
  CVE-2026-16405

  Information disclosure in the Networking: WebSockets component

  Information disclosure in the Networking: WebSockets component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• High 7.5
  CVE-2026-16409

  Invalid pointer in the Security: PSM component

  Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• High 7.4
  CVE-2026-16404

  Spoofing issue in Firefox for Android

  Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.

  Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu
  Jul 21, 2026
• Medium 6.5
  CVE-2026-16397

  Clickjacking issue in the WebExtensions component in Firefox for Android

  Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153.

  Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Wolfi
  Jul 21, 2026
• Medium 6.5
  CVE-2026-16403

  Spoofing issue in the Address Bar component

  Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Jul 21, 2026
• Medium 5.4
  CVE-2026-15719

  Site isolation issue in the DOM: Navigation component

  We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  Jul 14, 2026
• Medium 4.3
  CVE-2026-15718 Public exploit

  Invalid pointer in the JavaScript: WebAssembly component

  We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  Jul 14, 2026

Revision history

1. 2026-11-08 #40

   Neue Updates von Oracle Linux aufgenommen

2. 2026-11-05 #39

   Neue Updates von Oracle Linux aufgenommen

3. 2026-10-12 #38

   Neue Updates von Red Hat aufgenommen

4. 2026-10-11 #37

   Neue Updates von Red Hat aufgenommen

5. 2026-10-07 #36

   Neue Updates von Red Hat aufgenommen

6. 2026-10-06 #35

   Neue Updates von Red Hat aufgenommen

7. 2026-10-01 #34

   Neue Updates von Rocky Enterprise Software Foundation und Oracle Linux aufgenommen

8. 2026-09-30 #33

   Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen

9. 2026-09-29 #32

   Neue Updates von Oracle Linux aufgenommen

10. 2026-09-28 #31

    Neue Updates von Red Hat aufgenommen

11. 2026-09-27 #30

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

12. 2026-09-24 #29

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

13. 2026-09-23 #28

    Neue Updates von Red Hat aufgenommen

14. 2026-09-21 #27

    Neue Updates von Oracle Linux aufgenommen

15. 2026-09-20 #26

    Neue Updates von SUSE aufgenommen

16. 2026-09-17 #25

    Neue Updates von Oracle Linux aufgenommen

17. 2026-09-16 #24

    Neue Updates von SUSE und Red Hat aufgenommen

18. 2026-09-14 #23

    Neue Updates von Oracle Linux aufgenommen

19. 2026-09-13 #22

    Neue Updates von Red Hat aufgenommen

20. 2026-09-09 #21

    Neue Updates von SUSE aufgenommen

21. 2026-09-06 #20

    Neue Updates von Debian und openSUSE aufgenommen

22. 2026-09-03 #19

    Neue Updates von Debian aufgenommen

23. 2026-09-02 #18

    Neue Updates von Debian und openSUSE aufgenommen

24. 2026-08-17 #17

    Neue Updates von Amazon aufgenommen

25. 2026-08-16 #16

    Neue Updates von SUSE aufgenommen

References

• Mozilla Security Advisory mfsa2026-68 vom 2026-07-21
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/
• Mozilla Security Advisory mfsa2026-69 vom 2026-07-21
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-69/
• Mozilla Security Advisory mfsa2026-70 vom 2026-07-21
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/
• Mozilla Security Advisory mfsa2026-71 vom 2026-07-21
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-71/
• Mozilla Security Advisory mfsa2026-72 vom 2026-07-21
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/
• Debian Security Advisory DSA-6394 vom 2026-07-23
  https://security-tracker.debian.org/tracker/DSA-6394-1
• Debian Security Advisory DLA-4695 vom 2026-07-23
  https://lists.debian.org/debian-lts-announce/2026/07/msg00037.html
• IGEL Security Notice ISN-2026-30 vom 2026-07-22
  https://kb.igel.com/en/security-safety/current/isn-2026-30-critical-firefox-esr-vulnerabilities
• SUSE Security Update SUSE-SU-2026:3200-1 vom 2026-07-23
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027790.html
• openSUSE Security Update OPENSUSE-SU-2026:11329-1 vom 2026-07-23
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7Q75SNXKPZN7GI5DJMLO5LBJU6AEAT7M/
• SUSE Security Update SUSE-SU-2026:3221-1 vom 2026-07-24
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027809.html
• openSUSE Security Update OPENSUSE-SU-2026:11359-1 vom 2026-07-26
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HJIJRVDFXZ3C64LMZ44SM64EVQVKPYDV/
• openSUSE Security Update OPENSUSE-SU-2026:11358-1 vom 2026-07-26
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BOENUHR7WHRNTPMYNYT37JNSD24XW5JJ/
• Red Hat Security Advisory RHSA-2026:47105 vom 2026-07-29
  https://access.redhat.com/errata/RHSA-2026:47105
• Red Hat Security Advisory RHSA-2026:47101 vom 2026-07-29
  https://access.redhat.com/errata/RHSA-2026:47101
• Oracle Linux Security Advisory ELSA-2026-47105 vom 2026-07-29
  https://linux.oracle.com/errata/ELSA-2026-47105.html
• Rocky Linux Security Advisory RLSA-2026:47105 vom 2026-07-29
  https://errata.build.resf.org/RLSA-2026:47105
• Debian Security Advisory DSA-6403 vom 2026-07-30
  https://security-tracker.debian.org/tracker/DSA-6403-1
• Rocky Linux Security Advisory RLSA-2026:47101 vom 2026-07-30
  https://errata.build.resf.org/RLSA-2026:47101
• Oracle Linux Security Advisory ELSA-2026-47104 vom 2026-07-31
  https://linux.oracle.com/errata/ELSA-2026-47104.html
• Red Hat Security Advisory RHSA-2026:49621 vom 2026-08-03
  https://access.redhat.com/errata/RHSA-2026:49621
• Red Hat Security Advisory RHSA-2026:47104 vom 2026-08-03
  https://access.redhat.com/errata/RHSA-2026:47104
• Oracle Linux Security Advisory ELSA-2026-49621 vom 2026-08-04
  https://linux.oracle.com/errata/ELSA-2026-49621.html
• Rocky Linux Security Advisory RLSA-2026:47104 vom 2026-08-03
  https://errata.build.resf.org/RLSA-2026:47104
• Red Hat Security Advisory RHSA-2026:49921 vom 2026-08-04
  https://access.redhat.com/errata/RHSA-2026:49921
• Red Hat Security Advisory RHSA-2026:49922 vom 2026-08-04
  https://access.redhat.com/errata/RHSA-2026:49922
• Oracle Linux Security Advisory ELSA-2026-49922 vom 2026-08-05
  https://linux.oracle.com/errata/ELSA-2026-49922.html
• Oracle Linux Security Advisory ELSA-2026-47101 vom 2026-08-04
  http://linux.oracle.com/errata/ELSA-2026-47101.html
• Rocky Linux Security Advisory RLSA-2026:49921 vom 2026-08-06
  https://errata.build.resf.org/RLSA-2026:49921
• Rocky Linux Security Advisory RLSA-2026:49621 vom 2026-08-06
  https://errata.build.resf.org/RLSA-2026:49621
• Oracle Linux Security Advisory ELSA-2026-49921 vom 2026-08-05
  http://linux.oracle.com/errata/ELSA-2026-49921.html
• Rocky Linux Security Advisory RLSA-2026:49922 vom 2026-08-06
  https://errata.build.resf.org/RLSA-2026:49922
• Debian Security Advisory DSA-6418 vom 2026-08-08
  https://security-tracker.debian.org/tracker/DSA-6418-1
• Debian Security Advisory DLA-4727 vom 2026-08-10
  https://lists.debian.org/debian-lts-announce/2026/08/msg00017.html
• SUSE Security Update SUSE-SU-2026:3546-1 vom 2026-08-11
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028186.html
• Debian Security Advisory DLA-4729 vom 2026-08-10
  https://lists.debian.org/debian-lts-announce/2026/08/msg00019.html
• Red Hat Security Advisory RHSA-2026:53446 vom 2026-08-11
  https://access.redhat.com/errata/RHSA-2026:53446
• Red Hat Security Advisory RHSA-2026:53444 vom 2026-08-11
  https://access.redhat.com/errata/RHSA-2026:53444
• Red Hat Security Advisory RHSA-2026:53445 vom 2026-08-11
  https://access.redhat.com/errata/RHSA-2026:53445
• Red Hat Security Advisory RHSA-2026:53453 vom 2026-08-11
  https://access.redhat.com/errata/RHSA-2026:53453
• Red Hat Security Advisory RHSA-2026:53455 vom 2026-08-11
  https://access.redhat.com/errata/RHSA-2026:53455
• Red Hat Security Advisory RHSA-2026:53475 vom 2026-08-11
  https://access.redhat.com/errata/RHSA-2026:53475
• Red Hat Security Advisory RHSA-2026:53454 vom 2026-08-12
  https://access.redhat.com/errata/RHSA-2026:53454
• Red Hat Security Advisory RHSA-2026:54185 vom 2026-08-12
  https://access.redhat.com/errata/RHSA-2026:54185
• Red Hat Security Advisory RHSA-2026:54248 vom 2026-08-12
  https://access.redhat.com/errata/RHSA-2026:54248
• Red Hat Security Advisory RHSA-2026:54249 vom 2026-08-12
  https://access.redhat.com/errata/RHSA-2026:54249
• Red Hat Security Advisory RHSA-2026:54259 vom 2026-08-12
  https://access.redhat.com/errata/RHSA-2026:54259
• Red Hat Security Advisory RHSA-2026:54180 vom 2026-08-12
  https://access.redhat.com/errata/RHSA-2026:54180
• Red Hat Security Advisory RHSA-2026:54181 vom 2026-08-12
  https://access.redhat.com/errata/RHSA-2026:54181
• Red Hat Security Advisory RHSA-2026:54339 vom 2026-08-12
  https://access.redhat.com/errata/RHSA-2026:54339
• SUSE Security Update SUSE-SU-2026:23137-1 vom 2026-08-14
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028310.html
• SUSE Security Update SUSE-SU-2026:23115-1 vom 2026-08-14
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028328.html
• Amazon Linux Security Advisory ALAS2FIREFOX-2026-063 vom 2026-08-18
  https://alas.aws.amazon.com/AL2/ALAS2FIREFOX-2026-063.html
• Amazon Linux Security Advisory ALAS2-2026-3868 vom 2026-08-18
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3868.html
• Debian Security Advisory DSA-6481 vom 2026-09-03
  https://security-tracker.debian.org/tracker/DSA-6481-1
• openSUSE Security Update OPENSUSE-SU-2026:21713-1 vom 2026-09-02
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MY2GXMX2FKQCYGZTHFPV3WJUWEGOEHBV/
• Debian Security Advisory DLA-4770 vom 2026-09-04
  https://lists.debian.org/debian-lts-announce/2026/09/msg00005.html
• Debian Security Advisory DSA-6483 vom 2026-09-04
  https://security-tracker.debian.org/tracker/DSA-6483-1
• openSUSE Security Update OPENSUSE-SU-2026:11678-1 vom 2026-09-05
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UCZKQSKQYLMXP24GKZRIKCMBCSV6KDQP/
• Debian Security Advisory DLA-4775 vom 2026-09-07
  https://lists.debian.org/debian-lts-announce/2026/09/msg00010.html
• SUSE Security Update SUSE-SU-2026:23411-1 vom 2026-09-10
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/028766.html
• Red Hat Security Advisory RHSA-2026:67133 vom 2026-09-14
  https://access.redhat.com/errata/RHSA-2026:67133
• Red Hat Security Advisory RHSA-2026:67129 vom 2026-09-14
  https://access.redhat.com/errata/RHSA-2026:67129
• Oracle Linux Security Advisory ELSA-2026-67129 vom 2026-09-14
  https://linux.oracle.com/errata/ELSA-2026-67129-0.html
• Oracle Linux Security Advisory ELSA-2026-67133 vom 2026-09-15
  https://linux.oracle.com/errata/ELSA-2026-67133-0.html
• SUSE Security Update SUSE-SU-2026:4140-1 vom 2026-09-16
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029055.html
• SUSE Security Update SUSE-SU-2026:4156-1 vom 2026-09-16
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029128.html
• SUSE Security Update SUSE-SU-2026:23590-1 vom 2026-09-16
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029095.html
• Red Hat Security Advisory RHSA-2026:68549 vom 2026-09-17
  https://access.redhat.com/errata/RHSA-2026:68549
• Oracle Linux Security Advisory ELSA-2026-68549 vom 2026-09-18
  https://linux.oracle.com/errata/ELSA-2026-68549.html
• SUSE Security Update SUSE-SU-2026:4268-1 vom 2026-09-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029231.html
• IGEL Security Notice ISN-2026-38 vom 2026-09-21
  https://kb.igel.com/en/security-safety/current/isn-2026-38-critical-firefox-esr-vulnerabilities
• Oracle Linux Security Advisory ELSA-2026-54248 vom 2026-09-22
  https://linux.oracle.com/errata/ELSA-2026-54248.html
• Red Hat Security Advisory RHSA-2026:70642 vom 2026-09-23
  https://access.redhat.com/errata/RHSA-2026:70642
• Rocky Linux Security Advisory RLSA-2026:70642 vom 2026-09-25
  https://errata.build.resf.org/RLSA-2026:70642
• Oracle Linux Security Advisory ELSA-2026-70642 vom 2026-09-25
  https://linux.oracle.com/errata/ELSA-2026-70642.html
• Rocky Linux Security Advisory RLSA-2026:67129 vom 2026-09-27
  https://errata.build.resf.org/RLSA-2026:67129
• Rocky Linux Security Advisory RLSA-2026:68549 vom 2026-09-27
  https://errata.build.resf.org/RLSA-2026:68549
• Rocky Linux Security Advisory RLSA-2026:67133 vom 2026-09-27
  https://errata.build.resf.org/RLSA-2026:67133
• Red Hat Security Advisory RHSA-2026:73130 vom 2026-09-29
  https://access.redhat.com/errata/RHSA-2026:73130