Threats Tagged 'cve-2026-84144'

Multiple security vulnerabilities have been fixed in Mozilla Firefox Extended Support Release 153.2.0 ESR, including sandbox escapes, use-after-free bugs, privilege escalations, information disclosures, site isolation issues, spoofing, clickjacking, and integer overflows across various components such as Remote Settings Client, JavaScript engine, DOM, Graphics, Networking, and Application Update. These issues are addressed in Firefox 154 and Firefox ESR 153.2. The vulnerabilities range in impact from moderate to high severity.

These are all security issues fixed in the MozillaFirefox-155.0-1.1 package on the GA media of openSUSE Tumbleweed.

Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

CVE-2026-84144 is a high-impact security vulnerability involving internally found bugs in Firefox 154 and Firefox ESR 153.1 that showed evidence of memory corruption or other security-relevant defects. These bugs were fixed in Firefox 155 and Firefox ESR 153.2. The vulnerability affects multiple Ubuntu-distributed versions of the mozjs52 JavaScript engine. The CVSS 3.1 score is 7.5 (medium severity) with network attack vector, high attack complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. The vendor advisory confirms that the issue is fixed in Firefox 155.