Updated nss & firefox packages fix security vulnerabilities
Incorrect boundary conditions in the Audio/Video: Playback component. (CVE-2026-100756) Use-after-free in the Widget component. (CVE-2026-100757) Sandbox escape in the DOM: Navigation component. (CVE-2026-100758) Uninitialized memory in the Storage: Quota Manager component. (CVE-2026-100759) Sandbox escape in the Security: Process Sandboxing component. (CVE-2026-100760) Sandbox escape due to use-after-free in the DOM: Content Processes component. (CVE-2026-100762) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100765) Information disclosure in the Networking: JAR component. (CVE-2026-100766) Use-after-free in the Networking: Cache component. (CVE-2026-100767) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100769) Sandbox escape due to use-after-free in the DOM: Content Processes component. (CVE-2026-100770) Undefined behavior in the DOM: Streams component. (CVE-2026-100771) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100772) Use-after-free in the Storage: IndexedDB component. (CVE-2026-100773) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100774) Sandbox escape in the Graphics component. (CVE-2026-100775) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100776) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100777) Sandbox escape due to use-after-free in the DOM: Core & HTML component. (CVE-2026-100778) Use-after-free in the XSLT component. (CVE-2026-100779) Use-after-free i
- Products
- firefox, firefox-l10n, nss
- Affected versions
- Not specified
- Fixed versions
- 153.4.0-1.mga10, 3.130.0-1.mga10
- CVEs
- CVE-2026-100756, CVE-2026-100757, CVE-2026-100758, CVE-2026-100759, CVE-2026-100760, CVE-2026-100762, CVE-2026-100765, CVE-2026-100766, CVE-2026-100767, CVE-2026-100769, CVE-2026-100770, CVE-2026-100771, CVE-2026-100772, CVE-2026-100773, CVE-2026-100774, CVE-2026-100775, CVE-2026-100776, CVE-2026-100777, CVE-2026-100778, CVE-2026-100779, CVE-2026-100780, CVE-2026-100781, CVE-2026-100782, CVE-2026-100783, CVE-2026-100784, CVE-2026-100785, CVE-2026-100786, CVE-2026-100787, CVE-2026-100788, CVE-2026-100789, CVE-2026-100790, CVE-2026-100791, CVE-2026-100792, CVE-2026-100794, CVE-2026-100797, CVE-2026-100798, CVE-2026-100800, CVE-2026-100801, CVE-2026-100803, CVE-2026-100806, CVE-2026-100807, CVE-2026-100808, CVE-2026-100809, CVE-2026-100811, CVE-2026-100812, CVE-2026-100814, CVE-2026-100815, CVE-2026-100816, CVE-2026-100818, CVE-2026-100819, CVE-2026-100820, CVE-2026-100821, CVE-2026-100822, CVE-2026-100824, CVE-2026-100825, CVE-2026-100826, CVE-2026-100828, CVE-2026-100829, CVE-2026-100830, CVE-2026-100831, CVE-2026-100832, CVE-2026-96869
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 08:49 UTC · Revision 1
Source evidence
Updated nss & firefox packages fix security vulnerabilities
core-osv · Original sourcePublished 12 Oct 2026, 18:47 UTC
Incorrect boundary conditions in the Audio/Video: Playback component. (CVE-2026-100756) Use-after-free in the Widget component. (CVE-2026-100757) Sandbox escape in the DOM: Navigation component. (CVE-2026-100758) Uninitialized memory in the Storage: Quota Manager component. (CVE-2026-100759) Sandbox escape in the Security: Process Sandboxing component. (CVE-2026-100760) Sandbox escape due to use-after-free in the DOM: Content Processes component. (CVE-2026-100762) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100765) Information disclosure in the Networking: JAR component. (CVE-2026-100766) Use-after-free in the Networking: Cache component. (CVE-2026-100767) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100769) Sandbox escape due to use-after-free in the DOM: Content Processes component. (CVE-2026-100770) Undefined behavior in the DOM: Streams component. (CVE-2026-100771) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100772) Use-after-free in the Storage: IndexedDB component. (CVE-2026-100773) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100774) Sandbox escape in the Graphics component. (CVE-2026-100775) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100776) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100777) Sandbox escape due to use-after-free in the DOM: Core & HTML component. (CVE-2026-100778) Use-after-free in the XSLT component. (CVE-2026-100779) Use-after-free i
osv:MGASA-2026-0491
nss
Fixed versions: 3.130.0-1.mga10
firefox-l10n
Fixed versions: 153.4.0-1.mga10
firefox
Fixed versions: 153.4.0-1.mga10
Complete source record
{
"id": "ad952709fa1f6bd1ca268689c3c977e42d716f91d23d4973d3531406d3235cde",
"url": "https://osv.dev/vulnerability/MGASA-2026-0491",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Updated nss & firefox packages fix security vulnerabilities",
"summary": "Incorrect boundary conditions in the Audio/Video: Playback component. (CVE-2026-100756) Use-after-free in the Widget component. (CVE-2026-100757) Sandbox escape in the DOM: Navigation component. (CVE-2026-100758) Uninitialized memory in the Storage: Quota Manager component. (CVE-2026-100759) Sandbox escape in the Security: Process Sandboxing component. (CVE-2026-100760) Sandbox escape due to use-after-free in the DOM: Content Processes component. (CVE-2026-100762) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100765) Information disclosure in the Networking: JAR component. (CVE-2026-100766) Use-after-free in the Networking: Cache component. (CVE-2026-100767) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100769) Sandbox escape due to use-after-free in the DOM: Content Processes component. (CVE-2026-100770) Undefined behavior in the DOM: Streams component. (CVE-2026-100771) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100772) Use-after-free in the Storage: IndexedDB component. (CVE-2026-100773) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100774) Sandbox escape in the Graphics component. (CVE-2026-100775) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100776) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100777) Sandbox escape due to use-after-free in the DOM: Core & HTML component. (CVE-2026-100778) Use-after-free in the XSLT component. (CVE-2026-100779) Use-after-free i",
"evidence": "osv:MGASA-2026-0491",
"products": [
{
"name": {
"value": "nss",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.130.0-1.mga10",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "firefox-l10n",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "153.4.0-1.mga10",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "firefox",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "153.4.0-1.mga10",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "MGASA-2026-0491",
"aliases": [
"MGASA-2026-0491"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.130.0-1.mga10"
}
]
}
],
"package": {
"name": "nss",
"purl": "pkg:rpm/mageia/nss?arch=source&distro=mageia-10",
"ecosystem": "Mageia:10"
},
"database_specific": {
"source": "https://advisories.mageia.org/MGASA-2026-0491.json"
},
"ecosystem_specific": {
"section": "core"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "153.4.0-1.mga10"
}
]
}
],
"package": {
"name": "firefox-l10n",
"purl": "pkg:rpm/mageia/firefox-l10n?arch=source&distro=mageia-10",
"ecosystem": "Mageia:10"
},
"database_specific": {
"source": "https://advisories.mageia.org/MGASA-2026-0491.json"
},
"ecosystem_specific": {
"section": "core"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "153.4.0-1.mga10"
}
]
}
],
"package": {
"name": "firefox",
"purl": "pkg:rpm/mageia/firefox?arch=source&distro=mageia-10",
"ecosystem": "Mageia:10"
},
"database_specific": {
"source": "https://advisories.mageia.org/MGASA-2026-0491.json"
},
"ecosystem_specific": {
"section": "core"
}
}
],
"modified": "2026-10-12T19:13:25.175883546Z",
"provider": "osv",
"upstream": [
"CVE-2026-100756",
"CVE-2026-100757",
"CVE-2026-100758",
"CVE-2026-100759",
"CVE-2026-100760",
"CVE-2026-100762",
"CVE-2026-100765",
"CVE-2026-100766",
"CVE-2026-100767",
"CVE-2026-100769",
"CVE-2026-100770",
"CVE-2026-100771",
"CVE-2026-100772",
"CVE-2026-100773",
"CVE-2026-100774",
"CVE-2026-100775",
"CVE-2026-100776",
"CVE-2026-100777",
"CVE-2026-100778",
"CVE-2026-100779",
"CVE-2026-100780",
"CVE-2026-100781",
"CVE-2026-100782",
"CVE-2026-100783",
"CVE-2026-100784",
"CVE-2026-100785",
"CVE-2026-100786",
"CVE-2026-100787",
"CVE-2026-100788",
"CVE-2026-100789",
"CVE-2026-100790",
"CVE-2026-100791",
"CVE-2026-100792",
"CVE-2026-100794",
"CVE-2026-100797",
"CVE-2026-100798",
"CVE-2026-100800",
"CVE-2026-100801",
"CVE-2026-100803",
"CVE-2026-100806",
"CVE-2026-100807",
"CVE-2026-100808",
"CVE-2026-100809",
"CVE-2026-100811",
"CVE-2026-100812",
"CVE-2026-100814",
"CVE-2026-100815",
"CVE-2026-100816",
"CVE-2026-100818",
"CVE-2026-100819",
"CVE-2026-100820",
"CVE-2026-100821",
"CVE-2026-100822",
"CVE-2026-100824",
"CVE-2026-100825",
"CVE-2026-100826",
"CVE-2026-100828",
"CVE-2026-100829",
"CVE-2026-100830",
"CVE-2026-100831",
"CVE-2026-100832",
"CVE-2026-96869"
],
"references": [
"https://advisories.mageia.org/MGASA-2026-0491.html",
"https://bugs.mageia.org/show_bug.cgi?id=36413",
"https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_130.html",
"https://www.firefox.com/en-US/firefox/153.4.0/releasenotes/",
"https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/"
]
},
"related_cves": [
{
"value": "CVE-2026-100756",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100757",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100758",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100759",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100760",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100762",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100765",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100766",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100767",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100769",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100770",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100771",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100772",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100773",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100774",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100775",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100776",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100777",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100778",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100779",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100780",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100781",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100782",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100783",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100784",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100785",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100786",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100787",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100788",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100789",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100790",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100791",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100792",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100794",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100797",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100798",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100800",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100801",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100803",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100806",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100807",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100808",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100809",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100811",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100812",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100814",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100815",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100816",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100818",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100819",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100820",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100821",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100822",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100824",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100825",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100826",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100828",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100829",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100830",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100831",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100832",
"evidence": "/upstream"
},
{
"value": "CVE-2026-96869",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 306735,
"published_at": "2026-10-12T18:47:12+00:00"
}