Security update for MozillaFirefox

{
  "id": "83082e34f5ec52ad8c8ed25dbbe0302eb1f37d059b2ed88388f219402ec00fe2",
  "url": "https://osv.dev/vulnerability/SUSE-SU-2026%3A23981-1",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Security update for MozillaFirefox",
    "summary": "This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929): - CVE-2026-96869: Information disclosure in the Networking component. - CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component. - CVE-2026-100757: Use-after-free in the Widget component. - CVE-2026-100758: Sandbox escape in the DOM: Navigation component. - CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component. - CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component. - CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component. - CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component. - CVE-2026-100766: Information disclosure in the Networking: JAR component. - CVE-2026-100767: Use-after-free in the Networking: Cache component. - CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component. - CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component. - CVE-2026-100771: Undefined behavior in the DOM: Streams component. - CVE-2026-100772: Use-after-free in the DOM: Core & HTML component. - CVE-2026-100773: Use-after-free in the Storage: IndexedDB component. - CVE-2026-100774: Use-after-free in the DOM: Core & HTML component. - CVE-2026-100775: Sandbox escape in the Graphics component. - CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component. -",
    "evidence": "osv:SUSE-SU-2026:23981-1",
    "products": [
      {
        "name": {
          "value": "MozillaFirefox",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "153.4.0-160000.1.1",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "MozillaFirefox",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "153.4.0-160000.1.1",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "SUSE-SU-2026:23981-1",
      "aliases": [
        "SUSE-SU-2026:23981-1"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "153.4.0-160000.1.1"
                }
              ]
            }
          ],
          "package": {
            "name": "MozillaFirefox",
            "purl": "pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2016.0",
            "ecosystem": "SUSE:Linux Enterprise Server 16.0"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23981-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "MozillaFirefox": "153.4.0-160000.1.1",
                "MozillaFirefox-devel": "153.4.0-160000.1.1",
                "MozillaFirefox-translations-other": "153.4.0-160000.1.1",
                "MozillaFirefox-translations-common": "153.4.0-160000.1.1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "153.4.0-160000.1.1"
                }
              ]
            }
          ],
          "package": {
            "name": "MozillaFirefox",
            "purl": "pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0",
            "ecosystem": "SUSE:Linux Enterprise Server for SAP applications 16.0"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23981-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "MozillaFirefox": "153.4.0-160000.1.1",
                "MozillaFirefox-devel": "153.4.0-160000.1.1",
                "MozillaFirefox-translations-other": "153.4.0-160000.1.1",
                "MozillaFirefox-translations-common": "153.4.0-160000.1.1"
              }
            ]
          }
        }
      ],
      "modified": "2026-10-06T17:23:09.000582669Z",
      "provider": "osv",
      "upstream": [
        "CVE-2026-100756",
        "CVE-2026-100757",
        "CVE-2026-100758",
        "CVE-2026-100759",
        "CVE-2026-100760",
        "CVE-2026-100762",
        "CVE-2026-100765",
        "CVE-2026-100766",
        "CVE-2026-100767",
        "CVE-2026-100769",
        "CVE-2026-100770",
        "CVE-2026-100771",
        "CVE-2026-100772",
        "CVE-2026-100773",
        "CVE-2026-100774",
        "CVE-2026-100775",
        "CVE-2026-100776",
        "CVE-2026-100777",
        "CVE-2026-100778",
        "CVE-2026-100779",
        "CVE-2026-100780",
        "CVE-2026-100781",
        "CVE-2026-100782",
        "CVE-2026-100783",
        "CVE-2026-100784",
        "CVE-2026-100785",
        "CVE-2026-100786",
        "CVE-2026-100787",
        "CVE-2026-100788",
        "CVE-2026-100789",
        "CVE-2026-100790",
        "CVE-2026-100791",
        "CVE-2026-100792",
        "CVE-2026-100794",
        "CVE-2026-100797",
        "CVE-2026-100798",
        "CVE-2026-100800",
        "CVE-2026-100801",
        "CVE-2026-100803",
        "CVE-2026-100806",
        "CVE-2026-100807",
        "CVE-2026-100808",
        "CVE-2026-100809",
        "CVE-2026-100811",
        "CVE-2026-100812",
        "CVE-2026-100814",
        "CVE-2026-100815",
        "CVE-2026-100816",
        "CVE-2026-100818",
        "CVE-2026-100819",
        "CVE-2026-100820",
        "CVE-2026-100821",
        "CVE-2026-100822",
        "CVE-2026-100824",
        "CVE-2026-100825",
        "CVE-2026-100826",
        "CVE-2026-100828",
        "CVE-2026-100829",
        "CVE-2026-100830",
        "CVE-2026-100831",
        "CVE-2026-100832",
        "CVE-2026-96869"
      ],
      "references": [
        "https://www.suse.com/support/update/announcement/2026/suse-su-202623981-1/",
        "https://bugzilla.suse.com/1282929",
        "https://www.suse.com/security/cve/CVE-2026-100756",
        "https://www.suse.com/security/cve/CVE-2026-100757",
        "https://www.suse.com/security/cve/CVE-2026-100758",
        "https://www.suse.com/security/cve/CVE-2026-100759",
        "https://www.suse.com/security/cve/CVE-2026-100760",
        "https://www.suse.com/security/cve/CVE-2026-100762",
        "https://www.suse.com/security/cve/CVE-2026-100765",
        "https://www.suse.com/security/cve/CVE-2026-100766",
        "https://www.suse.com/security/cve/CVE-2026-100767",
        "https://www.suse.com/security/cve/CVE-2026-100769",
        "https://www.suse.com/security/cve/CVE-2026-100770",
        "https://www.suse.com/security/cve/CVE-2026-100771",
        "https://www.suse.com/security/cve/CVE-2026-100772",
        "https://www.suse.com/security/cve/CVE-2026-100773",
        "https://www.suse.com/security/cve/CVE-2026-100774",
        "https://www.suse.com/security/cve/CVE-2026-100775",
        "https://www.suse.com/security/cve/CVE-2026-100776",
        "https://www.suse.com/security/cve/CVE-2026-100777",
        "https://www.suse.com/security/cve/CVE-2026-100778",
        "https://www.suse.com/security/cve/CVE-2026-100779",
        "https://www.suse.com/security/cve/CVE-2026-100780",
        "https://www.suse.com/security/cve/CVE-2026-100781",
        "https://www.suse.com/security/cve/CVE-2026-100782",
        "https://www.suse.com/security/cve/CVE-2026-100783",
        "https://www.suse.com/security/cve/CVE-2026-100784",
        "https://www.suse.com/security/cve/CVE-2026-100785",
        "https://www.suse.com/security/cve/CVE-2026-100786",
        "https://www.suse.com/security/cve/CVE-2026-100787",
        "https://www.suse.com/security/cve/CVE-2026-100788",
        "https://www.suse.com/security/cve/CVE-2026-100789",
        "https://www.suse.com/security/cve/CVE-2026-100790",
        "https://www.suse.com/security/cve/CVE-2026-100791",
        "https://www.suse.com/security/cve/CVE-2026-100792",
        "https://www.suse.com/security/cve/CVE-2026-100794",
        "https://www.suse.com/security/cve/CVE-2026-100797",
        "https://www.suse.com/security/cve/CVE-2026-100798",
        "https://www.suse.com/security/cve/CVE-2026-100800",
        "https://www.suse.com/security/cve/CVE-2026-100801",
        "https://www.suse.com/security/cve/CVE-2026-100803",
        "https://www.suse.com/security/cve/CVE-2026-100806",
        "https://www.suse.com/security/cve/CVE-2026-100807",
        "https://www.suse.com/security/cve/CVE-2026-100808",
        "https://www.suse.com/security/cve/CVE-2026-100809",
        "https://www.suse.com/security/cve/CVE-2026-100811",
        "https://www.suse.com/security/cve/CVE-2026-100812",
        "https://www.suse.com/security/cve/CVE-2026-100814",
        "https://www.suse.com/security/cve/CVE-2026-100815",
        "https://www.suse.com/security/cve/CVE-2026-100816",
        "https://www.suse.com/security/cve/CVE-2026-100818",
        "https://www.suse.com/security/cve/CVE-2026-100819",
        "https://www.suse.com/security/cve/CVE-2026-100820",
        "https://www.suse.com/security/cve/CVE-2026-100821",
        "https://www.suse.com/security/cve/CVE-2026-100822",
        "https://www.suse.com/security/cve/CVE-2026-100824",
        "https://www.suse.com/security/cve/CVE-2026-100825",
        "https://www.suse.com/security/cve/CVE-2026-100826",
        "https://www.suse.com/security/cve/CVE-2026-100828",
        "https://www.suse.com/security/cve/CVE-2026-100829",
        "https://www.suse.com/security/cve/CVE-2026-100830",
        "https://www.suse.com/security/cve/CVE-2026-100831",
        "https://www.suse.com/security/cve/CVE-2026-100832",
        "https://www.suse.com/security/cve/CVE-2026-96869"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2026-100756",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100757",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100758",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100759",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100760",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100762",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100765",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100766",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100767",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100769",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100770",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100771",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100772",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100773",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100774",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100775",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100776",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100777",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100778",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100779",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100780",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100781",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100782",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100783",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100784",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100785",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100786",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100787",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100788",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100789",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100790",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100791",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100792",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100794",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100797",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100798",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100800",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100801",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100803",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100806",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100807",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100808",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100809",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100811",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100812",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100814",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100815",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100816",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100818",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100819",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100820",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100821",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100822",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100824",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100825",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100826",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100828",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100829",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100830",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100831",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100832",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-96869",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 89325,
  "published_at": "2026-09-30T13:03:58+00:00"
}