Mozilla Firefox und Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 38

• Critical 10.0
  CVE-2026-75874

  Sandbox escape in the Remote Settings Client component

  Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 140.15, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Aug 18, 2026
• Critical 9.8
  CVE-2026-84129

  Site isolation issue in the DOM: Navigation component

  Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• Critical 9.8
  CVE-2026-84133

  Site isolation issue in the DOM: Push Subscriptions component

  Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• Critical 9.8
  CVE-2026-84134

  Other issue in the Profile Backup component

  Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• Critical 9.8
  CVE-2026-84135

  Other issue in Firefox Focus for Android

  Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.

  Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu
  Sep 1, 2026
• Critical 9.8
  CVE-2026-84136

  Other issue in the DOM: Navigation component

  Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• Critical 9.8
  CVE-2026-84137

  Spoofing issue in the DOM: Core & HTML component

  Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• Critical 9.8
  CVE-2026-84139

  Clickjacking issue in the DOM: Events component

  Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• Critical 9.8
  CVE-2026-84140

  Site isolation issue in the DOM: Navigation component

  Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• Critical 9.8
  CVE-2026-84141

  Integer overflow in the Graphics: ImageLib component

  Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• Critical 9.8
  CVE-2026-84142

  Internally found bugs fixed in Thunderbird 155

  Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firef…

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• Critical 9.8
  CVE-2026-84143

  Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15

  Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have bee…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Sep 1, 2026
• Critical 9.8
  CVE-2026-84637

  Calendar invitation attachments could launch local executables

  Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear…

  Mozilla Thunderbird thunderbird Ubuntu
  Sep 1, 2026
• Critical 9.6
  CVE-2026-84119

  Sandbox escape due to use-after-free in the DOM: Navigation component

  Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Sep 1, 2026
• Critical 9.6
  CVE-2026-84121

  Sandbox escape due to use-after-free in the DOM: Security component

  Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Sep 1, 2026
• Critical 9.1
  CVE-2026-84639

  Uninitialized memory in MIME parsing

  Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Sep 1, 2026
• High 8.8
  CVE-2026-16365

  Privilege escalation in the DOM: Workers component

  Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153, Thunderbird 153, Firefox ESR 140.15, and Thunderbird 140.15.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• High 8.8
  CVE-2026-16371

  Privilege escalation in the DOM: Navigation component

  Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, Thunderbird 140.13, Firefox ESR 140.15, and Thunderbird 140.15.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Jul 21, 2026
• High 8.8
  CVE-2026-74952

  Privilege escalation in the Application Update component

  Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Aug 18, 2026
• High 8.8
  CVE-2026-84117

  Privilege escalation in Firefox for Android

  Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155.

  Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu
  Sep 1, 2026
• High 8.8
  CVE-2026-84123

  Privilege escalation due to use-after-free in the Graphics: WebGPU component

  Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• High 8.8
  CVE-2026-84128

  Privilege escalation in the WebDriver BiDi component

  Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• High 8.8
  CVE-2026-84131

  Privilege escalation due to invalid pointer in the Graphics component

  Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Sep 1, 2026
• High 7.5
  CVE-2026-84130

  Information disclosure in the Graphics: WebGPU component

  Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• High 7.5
  CVE-2026-84132

  Information disclosure in the Networking: HTTP component

  Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• High 7.5
  CVE-2026-84138

  Denial-of-service in the PDF Viewer component

  Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• High 7.5
  CVE-2026-84144

  Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2

  Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulner…

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• High 7.5
  CVE-2026-84145

  Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15

  Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have bee…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Sep 1, 2026
• High 7.5
  CVE-2026-84640

  One byte overflow read in mail parser

  A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Sep 1, 2026
• High 7.5
  CVE-2026-84641

  Information disclosure due to malicious IMAP server response

  A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Sep 1, 2026
• High 7.5
  CVE-2026-84642

  Allowed UNC hostnames for attachments interpreted as a regular expression

  The values of the mail.allowed_attachment_hostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow certain unintended hostnames to also match and serve remote attachments. This v…

  Mozilla Thunderbird thunderbird Ubuntu
  Sep 1, 2026
• Medium 5.4
  CVE-2026-84118 Public exploit

  Use-after-free in the JavaScript: GC component

  Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• Medium 5.4
  CVE-2026-84120

  Use-after-free in the Audio/Video component

  Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Sep 1, 2026
• Medium 5.4
  CVE-2026-84122

  Use-after-free in the Audio/Video component

  Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Sep 1, 2026
• Medium 5.4
  CVE-2026-84124

  Use-after-free in the DOM: Core & HTML component

  Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  Sep 1, 2026
• Medium 5.4
  CVE-2026-84125

  Use-after-free in the DOM: Core & HTML component

  Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• Medium 4.3
  CVE-2026-84126

  Incorrect boundary conditions in the Layout: Grid component

  Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Sep 1, 2026
• Medium 4.3
  CVE-2026-84127

  Information disclosure in the WebExtensions component in Firefox for Android

  Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.

  Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu
  Sep 1, 2026

Revision history

1. 2026-11-08 #24

   Neue Updates von Oracle Linux aufgenommen

2. 2026-11-05 #23

   Neue Updates von Oracle Linux aufgenommen

3. 2026-10-22 #22

   Neue Updates von openSUSE aufgenommen

4. 2026-10-12 #21

   Neue Updates von Amazon und Red Hat aufgenommen

5. 2026-10-11 #20

   Neue Updates von Red Hat aufgenommen

6. 2026-10-07 #19

   Neue Updates von Red Hat aufgenommen

7. 2026-10-06 #18

   Neue Updates von Red Hat aufgenommen

8. 2026-10-01 #17

   Neue Updates von Oracle Linux und Rocky Enterprise Software Foundation aufgenommen

9. 2026-09-30 #16

   Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen

10. 2026-09-29 #15

    Neue Updates von Oracle Linux aufgenommen

11. 2026-09-28 #14

    Neue Updates von Amazon aufgenommen

12. 2026-09-27 #13

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

13. 2026-09-24 #12

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

14. 2026-09-23 #11

    Neue Updates von Red Hat aufgenommen

15. 2026-09-21 #10

    Neue Updates von Oracle Linux aufgenommen

16. 2026-09-20 #9

    Neue Updates von SUSE aufgenommen

17. 2026-09-17 #8

    Neue Updates von openSUSE und Oracle Linux aufgenommen

18. 2026-09-16 #7

    Neue Updates von Red Hat und SUSE aufgenommen

19. 2026-09-14 #6

    Neue Updates von Oracle Linux aufgenommen

20. 2026-09-13 #5

    Neue Updates von Red Hat aufgenommen

21. 2026-09-06 #4

    Neue Updates von openSUSE und Debian aufgenommen

22. 2026-09-03 #3

    Neue Updates von Debian aufgenommen

23. 2026-09-02 #2

    Neue Updates von Debian aufgenommen

24. 2026-09-01 #1

    Initiale Fassung

References

• Mozilla Security Advisory mfsa2026-82 vom 2026-09-01
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-82/
• Mozilla Security Advisory mfsa2026-83 vom 2026-09-01
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-83/
• Mozilla Security Advisory mfsa2026-84 vom 2026-09-01
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-84/
• Mozilla Security Advisory mfsa2026-85 vom 2026-09-01
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-85/
• Mozilla Security Advisory mfsa2026-86 vom 2026-09-01
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-86/
• Mozilla Security Advisory mfsa2026-87 vom 2026-09-01
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-87/
• Mozilla Security Advisory mfsa2026-88 vom 2026-09-01
  https://www.mozilla.org/en-US/security/advisories/mfsa2026-88/
• Debian Security Advisory DSA-6481 vom 2026-09-03
  https://security-tracker.debian.org/tracker/DSA-6481-1
• Debian Security Advisory DLA-4770 vom 2026-09-04
  https://lists.debian.org/debian-lts-announce/2026/09/msg00005.html
• openSUSE Security Update OPENSUSE-SU-2026:11677-1 vom 2026-09-05
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BV35DTHC7HHTCY7OAQ37DC4W2QZZILEU/
• Debian Security Advisory DSA-6483 vom 2026-09-04
  https://security-tracker.debian.org/tracker/DSA-6483-1
• openSUSE Security Update OPENSUSE-SU-2026:11666-1 vom 2026-09-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2Q7IWB4ZYMGLDTC4JO5KZZG7WFSEJMZI/
• openSUSE Security Update OPENSUSE-SU-2026:11678-1 vom 2026-09-05
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UCZKQSKQYLMXP24GKZRIKCMBCSV6KDQP/
• Debian Security Advisory DLA-4775 vom 2026-09-07
  https://lists.debian.org/debian-lts-announce/2026/09/msg00010.html
• Red Hat Security Advisory RHSA-2026:67129 vom 2026-09-14
  https://access.redhat.com/errata/RHSA-2026:67129
• Red Hat Security Advisory RHSA-2026:67133 vom 2026-09-14
  https://access.redhat.com/errata/RHSA-2026:67133
• Oracle Linux Security Advisory ELSA-2026-67129 vom 2026-09-14
  https://linux.oracle.com/errata/ELSA-2026-67129-0.html
• Oracle Linux Security Advisory ELSA-2026-67133 vom 2026-09-15
  https://linux.oracle.com/errata/ELSA-2026-67133-0.html
• Red Hat Security Advisory RHSA-2026:68549 vom 2026-09-17
  https://access.redhat.com/errata/RHSA-2026:68549
• SUSE Security Update SUSE-SU-2026:4156-1 vom 2026-09-16
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029128.html
• SUSE Security Update SUSE-SU-2026:23590-1 vom 2026-09-16
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029095.html
• SUSE Security Update SUSE-SU-2026:4140-1 vom 2026-09-16
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029055.html
• openSUSE Security Update OPENSUSE-SU-2026:21853-1 vom 2026-09-17
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UOXW3HSIOO6CKBYARIUDPHVSCR7MPDYT/
• Oracle Linux Security Advisory ELSA-2026-68549 vom 2026-09-18
  https://linux.oracle.com/errata/ELSA-2026-68549.html
• SUSE Security Update SUSE-SU-2026:4268-1 vom 2026-09-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029231.html
• SUSE Security Update SUSE-SU-2026:23784-1 vom 2026-09-21
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029247.html
• IGEL Security Notice ISN-2026-38 vom 2026-09-21
  https://kb.igel.com/en/security-safety/current/isn-2026-38-critical-firefox-esr-vulnerabilities
• Oracle Linux Security Advisory ELSA-2026-54248 vom 2026-09-22
  https://linux.oracle.com/errata/ELSA-2026-54248.html
• Red Hat Security Advisory RHSA-2026:70642 vom 2026-09-23
  https://access.redhat.com/errata/RHSA-2026:70642
• Rocky Linux Security Advisory RLSA-2026:70642 vom 2026-09-25
  https://errata.build.resf.org/RLSA-2026:70642
• Oracle Linux Security Advisory ELSA-2026-70642 vom 2026-09-25
  https://linux.oracle.com/errata/ELSA-2026-70642.html
• Rocky Linux Security Advisory RLSA-2026:67133 vom 2026-09-27
  https://errata.build.resf.org/RLSA-2026:67133
• Rocky Linux Security Advisory RLSA-2026:68549 vom 2026-09-27
  https://errata.build.resf.org/RLSA-2026:68549
• Rocky Linux Security Advisory RLSA-2026:67129 vom 2026-09-27
  https://errata.build.resf.org/RLSA-2026:67129
• Amazon Linux Security Advisory ALAS2FIREFOX-2026-065 vom 2026-09-29
  https://alas.aws.amazon.com/AL2/ALAS2FIREFOX-2026-065.html
• Amazon Linux Security Advisory ALAS2-2026-3952 vom 2026-09-29
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3952.html
• Red Hat Security Advisory RHSA-2026:73130 vom 2026-09-29
  https://access.redhat.com/errata/RHSA-2026:73130
• Oracle Linux Security Advisory ELSA-2026-73130 vom 2026-09-29
  https://linux.oracle.com/errata/ELSA-2026-73130.html
• Red Hat Security Advisory RHSA-2026:73971 vom 2026-09-30
  https://access.redhat.com/errata/RHSA-2026:73971
• Rocky Linux Security Advisory RLSA-2026:73130 vom 2026-09-30
  https://errata.build.resf.org/RLSA-2026:73130
• Oracle Linux Security Advisory ELSA-2026-73971 vom 2026-10-02
  https://linux.oracle.com/errata/ELSA-2026-73971.html
• Rocky Linux Security Advisory RLSA-2026:73971 vom 2026-10-01
  https://errata.build.resf.org/RLSA-2026:73971
• Red Hat Security Advisory RHSA-2026:76895 vom 2026-10-07
  https://access.redhat.com/errata/RHSA-2026:76895
• Red Hat Security Advisory RHSA-2026:76746 vom 2026-10-06
  https://access.redhat.com/errata/RHSA-2026:76746
• Red Hat Security Advisory RHSA-2026:76740 vom 2026-10-06
  https://access.redhat.com/errata/RHSA-2026:76740
• Red Hat Security Advisory RHSA-2026:76745 vom 2026-10-06
  https://access.redhat.com/errata/RHSA-2026:76745
• Red Hat Security Advisory RHSA-2026:76742 vom 2026-10-06
  https://access.redhat.com/errata/RHSA-2026:76742
• Red Hat Security Advisory RHSA-2026:76894 vom 2026-10-06
  https://access.redhat.com/errata/RHSA-2026:76894
• Red Hat Security Advisory RHSA-2026:76741 vom 2026-10-06
  https://access.redhat.com/errata/RHSA-2026:76741
• Red Hat Security Advisory RHSA-2026:77627 vom 2026-10-08
  https://access.redhat.com/errata/RHSA-2026:77627
• Red Hat Security Advisory RHSA-2026:77610 vom 2026-10-07
  https://access.redhat.com/errata/RHSA-2026:77610
• Red Hat Security Advisory RHSA-2026:77632 vom 2026-10-07
  https://access.redhat.com/errata/RHSA-2026:77632
• Red Hat Security Advisory RHSA-2026:77631 vom 2026-10-08
  https://access.redhat.com/errata/RHSA-2026:77631
• Red Hat Security Advisory RHSA-2026:80503 vom 2026-10-12
  https://access.redhat.com/errata/RHSA-2026:80503
• Amazon Linux Security Advisory ALAS2FIREFOX-2026-066 vom 2026-10-13
  https://alas.aws.amazon.com/AL2/ALAS2FIREFOX-2026-066.html
• Red Hat Security Advisory RHSA-2026:81913 vom 2026-10-13
  https://access.redhat.com/errata/RHSA-2026:81913
• Red Hat Security Advisory RHSA-2026:81912 vom 2026-10-13
  https://access.redhat.com/errata/RHSA-2026:81912
• Red Hat Security Advisory RHSA-2026:82122 vom 2026-10-13
  https://access.redhat.com/errata/RHSA-2026:82122
• openSUSE Security Update OPENSUSE-SU-2026:12098-1 vom 2026-10-22
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HJKU6TT2E5K53YCVPTZIZCOVJLFCSVKB/
• Oracle Linux Security Advisory ELSA-2026-65442 vom 2026-11-05
  https://linux.oracle.com/errata/ELSA-2026-65442-0.html
• Oracle Linux Security Advisory ELSA-2026-76741 vom 2026-11-06
  https://linux.oracle.com/errata/ELSA-2026-76741.html
• Oracle Linux Security Advisory ELSA-2026-92363 vom 2026-11-06
  https://linux.oracle.com/errata/ELSA-2026-92363.html
• Oracle Linux Security Advisory ELSA-2026-83496 vom 2026-11-06
  https://linux.oracle.com/errata/ELSA-2026-83496.html