Updated firefox, nss, firefox-l10n packages fix security vulnerabilities

{
  "id": "f0ac68b42ec813ffb724e4cb9a573c833beb45b031c77985158cbf3d772552dc",
  "url": "https://osv.dev/vulnerability/MGASA-2026-0522",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Updated firefox, nss, firefox-l10n packages fix security vulnerabilities",
    "summary": "Privilege escalation in the Application Update component. (CVE-2026-109704) Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. (CVE-2026-109705) Use-after-free in the Storage: IndexedDB component. (CVE-2026-109706) Sandbox escape due to use-after-free in the Networking component. (CVE-2026-109707) Sandbox escape due to incorrect boundary conditions in the Networking component. (CVE-2026-109708) Information disclosure, privilege escalation in the Security: Process Sandboxing component. (CVE-2026-109709) Use-after-free in the Graphics: Text component. (CVE-2026-109710) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-109711) Sandbox escape due to uninitialized memory in the Graphics component. (CVE-2026-109712) Use-after-free in the Crash Reporting component. (CVE-2026-109713) Incorrect boundary conditions in the JavaScript Engine component. (CVE-2026-109715) Incorrect boundary conditions in the JavaScript Engine component. (CVE-2026-109716) Use-after-free in the DOM: Bindings (WebIDL) component. (CVE-2026-109717) Use-after-free in the XML component. (CVE-2026-109718) Race condition, use-after-free in the Graphics: CanvasWebGL component. (CVE-2026-109719) JIT miscompilation in the JavaScript: WebAssembly component. (CVE-2026-109720) Incorrect boundary conditions in the JavaScript Engine: JIT component. (CVE-2026-109721) JIT miscompilation in the JavaScript Engine: JIT component. (CVE-2026-109722) I",
    "evidence": "osv:MGASA-2026-0522",
    "products": [
      {
        "name": {
          "value": "firefox",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "153.5.0-1.mga10",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "nss",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.131.0-1.mga10",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "firefox-l10n",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "153.5.0-1.mga10",
            "evidence": "/affected/2/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "MGASA-2026-0522",
      "aliases": [
        "MGASA-2026-0522"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "153.5.0-1.mga10"
                }
              ]
            }
          ],
          "package": {
            "name": "firefox",
            "purl": "pkg:rpm/mageia/firefox?arch=source&distro=mageia-10",
            "ecosystem": "Mageia:10"
          },
          "database_specific": {
            "source": "https://advisories.mageia.org/MGASA-2026-0522.json"
          },
          "ecosystem_specific": {
            "section": "core"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.131.0-1.mga10"
                }
              ]
            }
          ],
          "package": {
            "name": "nss",
            "purl": "pkg:rpm/mageia/nss?arch=source&distro=mageia-10",
            "ecosystem": "Mageia:10"
          },
          "database_specific": {
            "source": "https://advisories.mageia.org/MGASA-2026-0522.json"
          },
          "ecosystem_specific": {
            "section": "core"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "153.5.0-1.mga10"
                }
              ]
            }
          ],
          "package": {
            "name": "firefox-l10n",
            "purl": "pkg:rpm/mageia/firefox-l10n?arch=source&distro=mageia-10",
            "ecosystem": "Mageia:10"
          },
          "database_specific": {
            "source": "https://advisories.mageia.org/MGASA-2026-0522.json"
          },
          "ecosystem_specific": {
            "section": "core"
          }
        }
      ],
      "modified": "2026-10-20T02:43:23.655041986Z",
      "provider": "osv",
      "upstream": [
        "CVE-2026-109704",
        "CVE-2026-109705",
        "CVE-2026-109706",
        "CVE-2026-109707",
        "CVE-2026-109708",
        "CVE-2026-109709",
        "CVE-2026-109710",
        "CVE-2026-109711",
        "CVE-2026-109712",
        "CVE-2026-109713",
        "CVE-2026-109715",
        "CVE-2026-109716",
        "CVE-2026-109717",
        "CVE-2026-109718",
        "CVE-2026-109719",
        "CVE-2026-109720",
        "CVE-2026-109721",
        "CVE-2026-109722",
        "CVE-2026-109723",
        "CVE-2026-109724",
        "CVE-2026-109725",
        "CVE-2026-109726",
        "CVE-2026-109727",
        "CVE-2026-109728",
        "CVE-2026-109729",
        "CVE-2026-109730",
        "CVE-2026-109731",
        "CVE-2026-109732",
        "CVE-2026-109733",
        "CVE-2026-109734",
        "CVE-2026-109736",
        "CVE-2026-109737",
        "CVE-2026-109738",
        "CVE-2026-109741",
        "CVE-2026-109742",
        "CVE-2026-109743",
        "CVE-2026-109744",
        "CVE-2026-109745",
        "CVE-2026-109751",
        "CVE-2026-109752",
        "CVE-2026-109753",
        "CVE-2026-109754",
        "CVE-2026-109756",
        "CVE-2026-109757",
        "CVE-2026-109759",
        "CVE-2026-109760",
        "CVE-2026-109762",
        "CVE-2026-109763",
        "CVE-2026-109764",
        "CVE-2026-109765",
        "CVE-2026-109766",
        "CVE-2026-109767",
        "CVE-2026-109770",
        "CVE-2026-109775",
        "CVE-2026-109776",
        "CVE-2026-109777",
        "CVE-2026-109778",
        "CVE-2026-109781",
        "CVE-2026-109782",
        "CVE-2026-109783"
      ],
      "references": [
        "https://advisories.mageia.org/MGASA-2026-0522.html",
        "https://bugs.mageia.org/show_bug.cgi?id=36500",
        "https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_131.html",
        "https://www.firefox.com/en-US/firefox/153.5.0/releasenotes/",
        "https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2026-109704",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109705",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109706",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109707",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109708",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109709",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109710",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109711",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109712",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109713",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109715",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109716",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109717",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109718",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109719",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109720",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109721",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109722",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109723",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109724",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109725",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109726",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109727",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109728",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109729",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109730",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109731",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109732",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109733",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109734",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109736",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109737",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109738",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109741",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109742",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109743",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109744",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109745",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109751",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109752",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109753",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109754",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109756",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109757",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109759",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109760",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109762",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109763",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109764",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109765",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109766",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109767",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109770",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109775",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109776",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109777",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109778",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109781",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109782",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-109783",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 377313,
  "published_at": "2026-10-20T02:38:36+00:00"
}