RHSA-2026:3497

security update for firefox

view advisory published 2026-03-02

security update for firefox

describes (38)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-2793US	critical9.8	0.38% (31st)	—	2026-02-24
Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption…
CVE-2026-2792US	critical9.8	0.38% (31st)	—	2026-02-24
Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that…
CVE-2026-2791US	critical9.8OT elevated	0.60% (48th)	—	2026-02-24
Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2790US	critical9.8	0.25% (17th)	—	2026-02-24
Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2789US	critical9.8	0.53% (45th)	—	2026-02-24
Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2788US	critical9.8	0.68% (52nd)	—	2026-02-24
Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbir…
CVE-2026-2787US	critical9.8	0.64% (51st)	—	2026-02-24
Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8…
CVE-2026-2786US	critical9.8	0.51% (44th)	—	2026-02-24
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2785US	critical9.8	0.58% (47th)	—	2026-02-24
Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2784US	critical9.8OT elevated	0.49% (42nd)	—	2026-02-24
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2783US	high7.5	0.34% (28th)	—	2026-02-24
Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thund…
CVE-2026-2782US	critical9.8	0.34% (27th)	—	2026-02-24
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2781US	critical9.8	0.43% (37th)	—	2026-02-24
Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35.
CVE-2026-2780US	critical9.8	0.40% (34th)	—	2026-02-24
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2779US	critical9.8	0.69% (52nd)	—	2026-02-24
Incorrect boundary conditions in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2778US	critical10.0	0.56% (47th)	—	2026-02-24
Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbi…
CVE-2026-2777US	critical9.8	0.44% (38th)	—	2026-02-24
Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2776US	critical10.0	0.56% (47th)	—	2026-02-24
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 14…
CVE-2026-2775US	critical9.8OT elevated	0.84% (58th)	—	2026-02-24
Mitigation bypass in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2774US	critical9.8	0.85% (58th)	—	2026-02-24
Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

showing 20 of 38

references

External citations — patches, advisories, analysis.

remediations (76)

Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.8.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan