Threats Tagged 'cve-2026-84134'

Multiple security vulnerabilities have been fixed in Mozilla Firefox Extended Support Release 153.2.0 ESR, including sandbox escapes, use-after-free bugs, privilege escalations, information disclosures, site isolation issues, spoofing, clickjacking, and integer overflows across various components such as Remote Settings Client, JavaScript engine, DOM, Graphics, Networking, and Application Update. These issues are addressed in Firefox 154 and Firefox ESR 153.2. The vulnerabilities range in impact from moderate to high severity.

These are all security issues fixed in the MozillaFirefox-155.0-1.1 package on the GA media of openSUSE Tumbleweed.

Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

CVE-2026-84134 is a security vulnerability affecting multiple specific versions of the mozjs52 JavaScript engine used in Ubuntu distributions. The vulnerability is classified with a high CVSS score of 9.8, indicating critical impact potential. However, the exact technical details of this vulnerability are not described in the source data. According to the Mozilla Foundation Security Advisory 2026-82, this issue is categorized as a low impact 'other issue' in the Profile Backup component and was fixed in Firefox 155. There are no known exploits in the wild. Multiple affected versions across Ubuntu 18.04, 20.04, 22.04, and 24.04 LTS releases are listed. The vendor advisory confirms that the vulnerability has been addressed in Firefox 155, providing an official fix.