Summary
Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Firefox ESR und Thunderbird ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, den Speicher zu beschädigen, Denial-of-Service-Zustände zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
Product
Firefox ist ein Open Source Web Browser.
ESR ist die Variante mit verlängertem Support.
Thunderbird ist ein Open Source E-Mail Client.
Vulnerabilities 78
-
Critical 9.8
Incorrect boundary conditions in the Networking: HTTP component
Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
-
Critical 9.8
Incorrect boundary conditions in the DOM: Animation component
Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
-
Critical 9.8
Incorrect boundary conditions in the Security: Process Sandboxing component
Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
-
Critical 9.8
Sandbox escape in the Profile Backup component
Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
-
Critical 9.8
Ambiguous parsing of mail headers
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
Critical 9.6
Sandbox escape in the DOM: Core & HTML component
Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
Critical 9.6
Sandbox escape due to invalid pointer in the Graphics component
Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
Critical 9.6
Sandbox escape due to incorrect boundary conditions in the Graphics component
Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbird 156, Thunderbird 153.3, Firefox ESR 115.42, and Firefox ESR 140.17.
-
Critical 9.6
Sandbox escape due to incorrect boundary conditions in the WebRTC component
Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
Critical 9.6
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
Critical 9.3
Incorrect boundary conditions in the DOM: Editor component
Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
Critical 9.1
Site isolation issue in the Graphics component
Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
-
Critical 9.1
Mitigation bypass in the Remote Settings Client component
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
Critical 9.1
Mitigation bypass in the DOM: Networking component
Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
Critical 9.1
Sandbox escape due to race condition in the XPConnect component
Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
-
Critical 9.1
Spoofing issue due to invalid pointer in the Graphics component
Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
-
Critical 9.1
Mitigation bypass in the Enterprise Policies component
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
Critical 9.1
Mitigation bypass in the Networking component
Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
Critical 9.1
Mitigation bypass in the Widget: Win32 component
Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
Critical 9.1
Out-of-bounds read in IMAP response parser
A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Th…
-
Critical 9.0
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.…
-
High 8.8
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.…
-
High 8.8
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.…
-
High 8.8
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.…
-
High 8.8
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.…
-
High 8.8
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.…
-
High 8.8
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.…
-
High 8.8
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.…
-
High 8.8
Privilege escalation due to incorrect boundary conditions in the Graphics component
Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.
-
High 8.8
Privilege escalation in the WebExtensions component
Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the Disability Access APIs component
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
High 8.8
Privilege escalation in the DOM: Service Workers component
Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
High 8.8
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the JavaScript Engine: JIT component
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.
-
High 8.8
Use-after-free in the DOM: HTML Parser component
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the XML component
Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the SVG component
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the DOM: Navigation component
Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the Networking component
Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the DOM: Streams component
Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the SVG component
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
High 8.8
Privilege escalation in Firefox for Android
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156.
-
High 8.8
Use-after-free in the JavaScript: WebAssembly component
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
-
High 8.8
Privilege escalation due to incorrect boundary conditions in the Audio/Video component
Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the Graphics component
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Privilege escalation in the Crash Reporting component
Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the Widget: Win32 component
Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component
Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Privilege escalation in the Graphics: CanvasWebGL component
Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Privilege escalation in the Memory component
Privilege escalation in the Memory component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Privilege escalation in the DevTools component
Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the Graphics: Text component
Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the Graphics component
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the Internationalization component
Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Privilege escalation in the Session Restore component
Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Use-after-free in the Widget: Gtk component
Use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Privilege escalation in the Enterprise Policies component
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Mitigation bypass in the Popup Blocker component
Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.8
Incorrect boundary conditions in the Networking component
Incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 8.1
Mitigation bypass in the Remote Settings Client component
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
High 8.1
Buffer overrun in IMAP
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
High 8.0
Incorrect boundary conditions in the Safe Browsing component
Incorrect boundary conditions in the Safe Browsing component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 7.5
Race condition in the DOM: Content Processes component
Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
High 7.5
Information disclosure in the Networking: HTTP component
Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
Medium 6.5
Information disclosure in the Graphics: ImageLib component
Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
Medium 6.5
Denial-of-service in the Audio/Video component
Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
-
Medium 6.5
Denial-of-service in the SVG component
Denial-of-service in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
Medium 6.5
Denial-of-service in the Security component
Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
Medium 6.3
Mitigation bypass in the DOM: Notifications component
Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
Medium 5.4
Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component
Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
Medium 5.4
Site isolation issue in the Reader Mode component
Site isolation issue in the Reader Mode component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
Medium 5.4
Spoofing issue in the DOM: Navigation component
Spoofing issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
-
Medium 5.3
Use-after-free in the Audio/Video: Web Codecs component
Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
-
Medium 4.3
Information disclosure in the Networking component
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
Revision history
-
#24
Neue Updates von Oracle Linux aufgenommen
-
#23
Neue Updates von Red Hat aufgenommen
-
#22
Neue Updates von Red Hat aufgenommen
-
#21
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#20
Neue Updates von openSUSE aufgenommen
-
#19
Neue Updates von Red Hat aufgenommen
-
#18
Neue Updates von Red Hat aufgenommen
-
#17
Neue Updates von Red Hat, SUSE und Amazon aufgenommen
-
#16
Neue Updates von Oracle Linux aufgenommen
-
#15
Neue Updates von Oracle Linux aufgenommen
-
#14
Neue Updates von Debian aufgenommen
-
#13
Neue Updates von Debian, Oracle Linux und Rocky Enterprise Software Foundation aufgenommen
-
#12
Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen
-
#11
Neue Updates von SUSE und Oracle Linux aufgenommen
-
#10
Neue Updates von Amazon aufgenommen
-
#9
Neue Updates von Rocky Enterprise Software Foundation und openSUSE aufgenommen
-
#8
Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen
-
#7
Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen
-
#6
Neue Updates von Oracle Linux, openSUSE und Rocky Enterprise Software Foundation aufgenommen
-
#5
Neue Updates von Red Hat aufgenommen
-
#4
Neue Updates von SUSE und openSUSE aufgenommen
-
#3
Neue Updates von SUSE aufgenommen
-
#2
Neue Updates von Debian und Mozilla aufgenommen
-
#1
Initiale Fassung
References
-
Mozilla Security Advisory mfsa2026-90 vom 2026-09-15
https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/
-
Mozilla Security Advisory mfsa2026-91 vom 2026-09-15
https://www.mozilla.org/en-US/security/advisories/mfsa2026-91/
-
Mozilla Security Advisory mfsa2026-92 vom 2026-09-15
https://www.mozilla.org/en-US/security/advisories/mfsa2026-92/
-
Mozilla Security Advisory mfsa2026-93 vom 2026-09-15
https://www.mozilla.org/en-US/security/advisories/mfsa2026-93/
-
Mozilla Security Advisory mfsa2026-94 vom 2026-09-15
https://www.mozilla.org/en-US/security/advisories/mfsa2026-94/
-
Mozilla Security Advisory mfsa2026-95 vom 2026-09-15
https://www.mozilla.org/en-US/security/advisories/mfsa2026-95/
-
Debian Security Advisory DSA-6503 vom 2026-09-17
https://security-tracker.debian.org/tracker/DSA-6503-1
-
Debian Security Advisory DLA-4782 vom 2026-09-17
https://lists.debian.org/debian-lts-announce/2026/09/msg00017.html
-
Debian Security Advisory DSA-6501 vom 2026-09-17
https://security-tracker.debian.org/tracker/DSA-6501-1
-
Debian Security Advisory DLA-4781 vom 2026-09-17
https://lists.debian.org/debian-lts-announce/2026/09/msg00016.html
-
Mozilla Security Advisory MFSA2026-96 vom 2026-09-16
https://www.mozilla.org/en-US/security/advisories/mfsa2026-96/
-
SUSE Security Update SUSE-SU-2026:4247-1 vom 2026-09-17
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029225.html
-
SUSE Security Update SUSE-SU-2026:4264-1 vom 2026-09-18
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029233.html
-
openSUSE Security Update OPENSUSE-SU-2026:11796-1 vom 2026-09-18
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/P3H5BJF5VDFDLI262C6Q3C5W364WLE3I/
-
IGEL Security Notice ISN-2026-38 vom 2026-09-21
https://kb.igel.com/en/security-safety/current/isn-2026-38-critical-firefox-esr-vulnerabilities
-
Red Hat Security Advisory RHSA-2026:69461 vom 2026-09-22
https://access.redhat.com/errata/RHSA-2026:69461
-
Red Hat Security Advisory RHSA-2026:69462 vom 2026-09-21
https://access.redhat.com/errata/RHSA-2026:69462
-
Oracle Linux Security Advisory ELSA-2026-69462 vom 2026-09-22
https://linux.oracle.com/errata/ELSA-2026-69462.html
-
openSUSE Security Update OPENSUSE-SU-2026:11826-1 vom 2026-09-22
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HYTZKJXTAA4U4HKY54E7G2RK6U2O6LZH/
-
Oracle Linux Security Advisory ELSA-2026-69461 vom 2026-09-23
https://linux.oracle.com/errata/ELSA-2026-69461.html
-
Rocky Linux Security Advisory RLSA-2026:69461 vom 2026-09-22
https://errata.build.resf.org/RLSA-2026:69461
-
openSUSE Security Update OPENSUSE-SU-2026:11827-1 vom 2026-09-22
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U6VLJDLHISTLVJJJVREE63NFOGS4DIOG/
-
Red Hat Security Advisory RHSA-2026:70642 vom 2026-09-23
https://access.redhat.com/errata/RHSA-2026:70642
-
Rocky Linux Security Advisory RLSA-2026:69462 vom 2026-09-23
https://errata.build.resf.org/RLSA-2026:69462
-
Red Hat Security Advisory RHSA-2026:71652 vom 2026-09-24
https://access.redhat.com/errata/RHSA-2026:71652
-
Rocky Linux Security Advisory RLSA-2026:70642 vom 2026-09-25
https://errata.build.resf.org/RLSA-2026:70642
-
Oracle Linux Security Advisory ELSA-2026-70642 vom 2026-09-25
https://linux.oracle.com/errata/ELSA-2026-70642.html
-
Rocky Linux Security Advisory RLSA-2026:71652 vom 2026-09-26
https://errata.build.resf.org/RLSA-2026:71652
-
openSUSE Security Update OPENSUSE-SU-2026:21951-1 vom 2026-09-25
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NIWRQEW6A2ITCKBG42WXWGLQL4U5QCVG/
-
Amazon Linux Security Advisory ALAS2-2026-3952 vom 2026-09-29
https://alas.aws.amazon.com/AL2/ALAS2-2026-3952.html
-
Red Hat Security Advisory RHSA-2026:73130 vom 2026-09-29
https://access.redhat.com/errata/RHSA-2026:73130
-
SUSE Security Update SUSE-SU-2026:23918-1 vom 2026-09-29
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029461.html
-
Oracle Linux Security Advisory ELSA-2026-73130 vom 2026-09-29
https://linux.oracle.com/errata/ELSA-2026-73130.html
-
Oracle Linux Security Advisory ELSA-2026-71652 vom 2026-09-29
https://linux.oracle.com/errata/ELSA-2026-71652.html
-
Rocky Linux Security Advisory RLSA-2026:73130 vom 2026-09-30
https://errata.build.resf.org/RLSA-2026:73130
-
Red Hat Security Advisory RHSA-2026:73971 vom 2026-09-30
https://access.redhat.com/errata/RHSA-2026:73971
-
Debian Security Advisory DLA-4810 vom 2026-10-02
https://lists.debian.org/debian-lts-announce/2026/10/msg00002.html
-
Oracle Linux Security Advisory ELSA-2026-73971 vom 2026-10-02
https://linux.oracle.com/errata/ELSA-2026-73971.html
-
Rocky Linux Security Advisory RLSA-2026:73971 vom 2026-10-01
https://errata.build.resf.org/RLSA-2026:73971
-
Debian Security Advisory DSA-6536 vom 2026-10-02
https://security-tracker.debian.org/tracker/DSA-6536-1
-
Oracle Linux Security Advisory ELSA-2026-76761 vom 2026-10-08
https://linux.oracle.com/errata/ELSA-2026-76761.html
-
Oracle Linux Security Advisory ELSA-2026-76764 vom 2026-10-07
https://linux.oracle.com/errata/ELSA-2026-76764.html
-
Oracle Linux Security Advisory ELSA-2026-76850 vom 2026-10-09
https://linux.oracle.com/errata/ELSA-2026-76850.html
-
Red Hat Security Advisory RHSA-2026:81912 vom 2026-10-13
https://access.redhat.com/errata/RHSA-2026:81912
-
SUSE Security Update SUSE-SU-2026:4627-1 vom 2026-10-12
https://lists.suse.com/pipermail/sle-security-updates/2026-October/029779.html
-
Red Hat Security Advisory RHSA-2026:81394 vom 2026-10-12
https://access.redhat.com/errata/RHSA-2026:81394
-
Red Hat Security Advisory RHSA-2026:81393 vom 2026-10-12
https://access.redhat.com/errata/RHSA-2026:81393
-
Red Hat Security Advisory RHSA-2026:81392 vom 2026-10-12
https://access.redhat.com/errata/RHSA-2026:81392
-
Red Hat Security Advisory RHSA-2026:81913 vom 2026-10-13
https://access.redhat.com/errata/RHSA-2026:81913
-
Amazon Linux Security Advisory ALAS2FIREFOX-2026-066 vom 2026-10-13
https://alas.aws.amazon.com/AL2/ALAS2FIREFOX-2026-066.html
-
Red Hat Security Advisory RHSA-2026:81884 vom 2026-10-13
https://access.redhat.com/errata/RHSA-2026:81884
-
Red Hat Security Advisory RHSA-2026:82122 vom 2026-10-13
https://access.redhat.com/errata/RHSA-2026:82122
-
Red Hat Security Advisory RHSA-2026:82780 vom 2026-10-14
https://access.redhat.com/errata/RHSA-2026:82780
-
Red Hat Security Advisory RHSA-2026:82779 vom 2026-10-14
https://access.redhat.com/errata/RHSA-2026:82779
-
Red Hat Security Advisory RHSA-2026:82720 vom 2026-10-14
https://access.redhat.com/errata/RHSA-2026:82720
-
Red Hat Security Advisory RHSA-2026:82818 vom 2026-10-14
https://access.redhat.com/errata/RHSA-2026:82818
-
Red Hat Security Advisory RHSA-2026:82817 vom 2026-10-14
https://access.redhat.com/errata/RHSA-2026:82817
-
Red Hat Security Advisory RHSA-2026:83077 vom 2026-10-14
https://access.redhat.com/errata/RHSA-2026:83077
-
Red Hat Security Advisory RHSA-2026:83076 vom 2026-10-15
https://access.redhat.com/errata/RHSA-2026:83076
-
Red Hat Security Advisory RHSA-2026:83076 vom 2026-10-14
https://access.redhat.com/errata/RHSA-2026:83076
-
Red Hat Security Advisory RHSA-2026:83496 vom 2026-10-15
https://access.redhat.com/errata/RHSA-2026:83496
-
openSUSE Security Update OPENSUSE-SU-2026:12098-1 vom 2026-10-22
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HJKU6TT2E5K53YCVPTZIZCOVJLFCSVKB/
-
Rocky Linux Security Advisory RLSA-2026:76764 vom 2026-10-24
https://errata.build.resf.org/RLSA-2026:76764
-
Rocky Linux Security Advisory RLSA-2026:76850 vom 2026-10-24
https://errata.build.resf.org/RLSA-2026:76850
-
Rocky Linux Security Advisory RLSA-2026:76761 vom 2026-10-24
https://errata.build.resf.org/RLSA-2026:76761
-
Red Hat Security Advisory RHSA-2026:90913 vom 2026-10-27
https://access.redhat.com/errata/RHSA-2026:90913
-
Red Hat Security Advisory RHSA-2026:92226 vom 2026-10-29
https://access.redhat.com/errata/RHSA-2026:92226
-
Red Hat Security Advisory RHSA-2026:92227 vom 2026-10-29
https://access.redhat.com/errata/RHSA-2026:92227
-
Red Hat Security Advisory RHSA-2026:92228 vom 2026-10-29
https://access.redhat.com/errata/RHSA-2026:92228
-
Red Hat Security Advisory RHSA-2026:92011 vom 2026-10-28
https://access.redhat.com/errata/RHSA-2026:92011
-
Red Hat Security Advisory RHSA-2026:92012 vom 2026-10-28
https://access.redhat.com/errata/RHSA-2026:92012
-
Red Hat Security Advisory RHSA-2026:92327 vom 2026-10-29
https://access.redhat.com/errata/RHSA-2026:92327
-
Red Hat Security Advisory RHSA-2026:92335 vom 2026-10-29
https://access.redhat.com/errata/RHSA-2026:92335
-
Red Hat Security Advisory RHSA-2026:92363 vom 2026-10-29
https://access.redhat.com/errata/RHSA-2026:92363
-
Oracle Linux Security Advisory ELSA-2026-83496 vom 2026-11-06
https://linux.oracle.com/errata/ELSA-2026-83496.html
-
Oracle Linux Security Advisory ELSA-2026-92363 vom 2026-11-06
https://linux.oracle.com/errata/ELSA-2026-92363.html