csaf_suse - suse-su-2024:3507-1

suse-su-2024:3507-1

Vulnerability from csaf_suse

Published

2024-10-01 15:02

Modified

2024-10-01 15:02

Summary

Security update for MozillaThunderbird

Notes

Title of the patch

Security update for MozillaThunderbird

Description of the patch

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 128.2.3 MFSA 2024-43 (bsc#1229821) * CVE-2024-8394: Crash when aborting verification of OTR chat. * CVE-2024-8385: WASM type confusion involving ArrayTypes. * CVE-2024-8381: Type confusion when looking up a property name in a 'with' block. * CVE-2024-8382: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran. * CVE-2024-8384: Garbage collection could mis-color cross-compartment objects in OOM conditions. * CVE-2024-8386: SelectElements could be shown over another site if popups are allowed. * CVE-2024-8387: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. MFSA 2024-37 (bsc#1228648) * CVE-2024-7518: Fullscreen notification dialog can be obscured by document content. * CVE-2024-7519: Out of bounds memory access in graphics shared memory handling. * CVE-2024-7520: Type confusion in WebAssembly. * CVE-2024-7521: Incomplete WebAssembly exception handing. * CVE-2024-7522: Out of bounds read in editor component. * CVE-2024-7525: Missing permission check when creating a StreamFilter. * CVE-2024-7526: Uninitialized memory used by WebGL. * CVE-2024-7527: Use-after-free in JavaScript garbage collection. * CVE-2024-7528: Use-after-free in IndexedDB. * CVE-2024-7529: Document content could partially obscure security prompts. MFSA 2024-32 (bsc#1226316) * CVE-2024-6606: Out-of-bounds read in clipboard component. * CVE-2024-6607: Leaving pointerlock by pressing the escape key could be prevented. * CVE-2024-6608: Cursor could be moved out of the viewport using pointerlock. * CVE-2024-6609: Memory corruption in NSS. * CVE-2024-6610: Form validation popups could block exiting full-screen mode. * CVE-2024-6600: Memory corruption in WebGL API. * CVE-2024-6601: Race condition in permission assignment. * CVE-2024-6602: Memory corruption in NSS. * CVE-2024-6603: Memory corruption in thread creation. * CVE-2024-6611: Incorrect handling of SameSite cookies. * CVE-2024-6612: CSP violation leakage when using devtools. * CVE-2024-6613: Incorrect listing of stack frames. * CVE-2024-6614: Incorrect listing of stack frames. * CVE-2024-6604: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13. * CVE-2024-6615: Memory safety bugs fixed in Firefox 128 and Thunderbird 128. Bug fixes: - Recommend libfido2-udev in order to try to get security keys (e.g. Yubikeys) working out of the box. (bsc#1184272)

Patchnames

SUSE-2024-3507,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3507,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3507,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3507,SUSE-SLE-Product-WE-15-SP5-2024-3507,SUSE-SLE-Product-WE-15-SP6-2024-3507,openSUSE-SLE-15.5-2024-3507,openSUSE-SLE-15.6-2024-3507

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for MozillaThunderbird",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for MozillaThunderbird fixes the following issues:\n\n- Mozilla Thunderbird 128.2.3\n  MFSA 2024-43 (bsc#1229821)\n  * CVE-2024-8394: Crash when aborting verification of OTR chat.\n  * CVE-2024-8385: WASM type confusion involving ArrayTypes.\n  * CVE-2024-8381: Type confusion when looking up a property name in a \u0027with\u0027 block.\n  * CVE-2024-8382: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks\n    ran.\n  * CVE-2024-8384: Garbage collection could mis-color cross-compartment objects in OOM conditions.\n  * CVE-2024-8386: SelectElements could be shown over another site if popups are allowed.\n  * CVE-2024-8387: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2.\n  MFSA 2024-37 (bsc#1228648)\n  * CVE-2024-7518: Fullscreen notification dialog can be obscured by document content.\n  * CVE-2024-7519: Out of bounds memory access in graphics shared memory handling.\n  * CVE-2024-7520: Type confusion in WebAssembly.\n  * CVE-2024-7521: Incomplete WebAssembly exception handing.\n  * CVE-2024-7522: Out of bounds read in editor component.\n  * CVE-2024-7525: Missing permission check when creating a StreamFilter.\n  * CVE-2024-7526: Uninitialized memory used by WebGL.\n  * CVE-2024-7527: Use-after-free in JavaScript garbage collection.\n  * CVE-2024-7528: Use-after-free in IndexedDB.\n  * CVE-2024-7529: Document content could partially obscure security prompts.\n  MFSA 2024-32 (bsc#1226316)\n  * CVE-2024-6606: Out-of-bounds read in clipboard component.\n  * CVE-2024-6607: Leaving pointerlock by pressing the escape key could be prevented.\n  * CVE-2024-6608: Cursor could be moved out of the viewport using pointerlock.\n  * CVE-2024-6609: Memory corruption in NSS.\n  * CVE-2024-6610: Form validation popups could block exiting full-screen mode.\n  * CVE-2024-6600: Memory corruption in WebGL API.\n  * CVE-2024-6601: Race condition in permission assignment.\n  * CVE-2024-6602: Memory corruption in NSS.\n  * CVE-2024-6603: Memory corruption in thread creation.\n  * CVE-2024-6611: Incorrect handling of SameSite cookies.\n  * CVE-2024-6612: CSP violation leakage when using devtools.\n  * CVE-2024-6613: Incorrect listing of stack frames.\n  * CVE-2024-6614: Incorrect listing of stack frames.\n  * CVE-2024-6604: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird\n    115.13.\n  * CVE-2024-6615: Memory safety bugs fixed in Firefox 128 and Thunderbird 128.\n  \nBug fixes:\n- Recommend libfido2-udev in order to try to get security keys (e.g. Yubikeys) working out of the box. (bsc#1184272)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2024-3507,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3507,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3507,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3507,SUSE-SLE-Product-WE-15-SP5-2024-3507,SUSE-SLE-Product-WE-15-SP6-2024-3507,openSUSE-SLE-15.5-2024-3507,openSUSE-SLE-15.6-2024-3507",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_3507-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2024:3507-1",
        "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243507-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2024:3507-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-October/019538.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1184272",
        "url": "https://bugzilla.suse.com/1184272"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1226316",
        "url": "https://bugzilla.suse.com/1226316"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1228648",
        "url": "https://bugzilla.suse.com/1228648"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1229821",
        "url": "https://bugzilla.suse.com/1229821"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6600 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6600/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6601 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6601/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6602 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6602/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6603 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6603/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6604 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6604/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6606 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6606/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6607 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6607/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6608 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6608/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6609 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6609/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6610 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6610/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6611 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6611/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6612 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6612/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6613 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6613/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6614 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6614/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6615 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6615/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-7518 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-7518/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-7519 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-7519/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-7520 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-7520/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-7521 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-7521/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-7522 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-7522/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-7525 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-7525/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-7526 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-7526/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-7527 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-7527/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-7528 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-7528/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-7529 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-7529/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-8381 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-8381/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-8382 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-8382/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-8384 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-8384/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-8385 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-8385/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-8386 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-8386/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-8387 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-8387/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-8394 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-8394/"
      }
    ],
    "title": "Security update for MozillaThunderbird",
    "tracking": {
      "current_release_date": "2024-10-01T15:02:17Z",
      "generator": {
        "date": "2024-10-01T15:02:17Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2024:3507-1",
      "initial_release_date": "2024-10-01T15:02:17Z",
      "revision_history": [
        {
          "date": "2024-10-01T15:02:17Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
                  "product_id": "MozillaThunderbird-128.2.3-150200.8.177.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
                  "product_id": "MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
                  "product_id": "MozillaThunderbird-128.2.3-150200.8.177.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
                  "product_id": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
                  "product_id": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
                  "product_id": "MozillaThunderbird-128.2.3-150200.8.177.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 15 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 15 SP5",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.5",
                "product": {
                  "name": "openSUSE Leap 15.5",
                  "product_id": "openSUSE Leap 15.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.6",
                "product": {
                  "name": "openSUSE Leap 15.6",
                  "product_id": "openSUSE Leap 15.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP5",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP5",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP5",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.aarch64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.s390x as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-128.2.3-150200.8.177.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-6600",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6600"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on mac OS. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6600",
          "url": "https://www.suse.com/security/cve/CVE-2024-6600"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6600",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6600"
    },
    {
      "cve": "CVE-2024-6601",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6601"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6601",
          "url": "https://www.suse.com/security/cve/CVE-2024-6601"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6601",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6601"
    },
    {
      "cve": "CVE-2024-6602",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6602"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A mismatch between allocator and deallocator could have led to memory corruption. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6602",
          "url": "https://www.suse.com/security/cve/CVE-2024-6602"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6602",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6602"
    },
    {
      "cve": "CVE-2024-6603",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6603"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6603",
          "url": "https://www.suse.com/security/cve/CVE-2024-6603"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6603",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6603"
    },
    {
      "cve": "CVE-2024-6604",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6604"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6604",
          "url": "https://www.suse.com/security/cve/CVE-2024-6604"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6604",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6604"
    },
    {
      "cve": "CVE-2024-6606",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6606"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6606",
          "url": "https://www.suse.com/security/cve/CVE-2024-6606"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6606",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6606"
    },
    {
      "cve": "CVE-2024-6607",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6607"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `\u0026lt;select\u0026gt;` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6607",
          "url": "https://www.suse.com/security/cve/CVE-2024-6607"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6607",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6607"
    },
    {
      "cve": "CVE-2024-6608",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6608"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6608",
          "url": "https://www.suse.com/security/cve/CVE-2024-6608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6608",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6608"
    },
    {
      "cve": "CVE-2024-6609",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6609"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6609",
          "url": "https://www.suse.com/security/cve/CVE-2024-6609"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6609",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6609"
    },
    {
      "cve": "CVE-2024-6610",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6610"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6610",
          "url": "https://www.suse.com/security/cve/CVE-2024-6610"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6610",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6610"
    },
    {
      "cve": "CVE-2024-6611",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6611"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6611",
          "url": "https://www.suse.com/security/cve/CVE-2024-6611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6611",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6611"
    },
    {
      "cve": "CVE-2024-6612",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6612"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6612",
          "url": "https://www.suse.com/security/cve/CVE-2024-6612"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6612",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6612"
    },
    {
      "cve": "CVE-2024-6613",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6613"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6613",
          "url": "https://www.suse.com/security/cve/CVE-2024-6613"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6613",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6613"
    },
    {
      "cve": "CVE-2024-6614",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6614"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6614",
          "url": "https://www.suse.com/security/cve/CVE-2024-6614"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6614",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6614"
    },
    {
      "cve": "CVE-2024-6615",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6615"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6615",
          "url": "https://www.suse.com/security/cve/CVE-2024-6615"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226316 for CVE-2024-6615",
          "url": "https://bugzilla.suse.com/1226316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-6615"
    },
    {
      "cve": "CVE-2024-7518",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-7518"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 128.1, and Thunderbird \u003c 128.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-7518",
          "url": "https://www.suse.com/security/cve/CVE-2024-7518"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1228648 for CVE-2024-7518",
          "url": "https://bugzilla.suse.com/1228648"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-7518"
    },
    {
      "cve": "CVE-2024-7519",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-7519"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-7519",
          "url": "https://www.suse.com/security/cve/CVE-2024-7519"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1228648 for CVE-2024-7519",
          "url": "https://bugzilla.suse.com/1228648"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-7519"
    },
    {
      "cve": "CVE-2024-7520",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-7520"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 128.1, and Thunderbird \u003c 128.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-7520",
          "url": "https://www.suse.com/security/cve/CVE-2024-7520"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1228648 for CVE-2024-7520",
          "url": "https://bugzilla.suse.com/1228648"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-7520"
    },
    {
      "cve": "CVE-2024-7521",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-7521"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-7521",
          "url": "https://www.suse.com/security/cve/CVE-2024-7521"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1228648 for CVE-2024-7521",
          "url": "https://bugzilla.suse.com/1228648"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-7521"
    },
    {
      "cve": "CVE-2024-7522",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-7522"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-7522",
          "url": "https://www.suse.com/security/cve/CVE-2024-7522"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1228648 for CVE-2024-7522",
          "url": "https://bugzilla.suse.com/1228648"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-7522"
    },
    {
      "cve": "CVE-2024-7525",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-7525"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-7525",
          "url": "https://www.suse.com/security/cve/CVE-2024-7525"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1228648 for CVE-2024-7525",
          "url": "https://bugzilla.suse.com/1228648"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-7525"
    },
    {
      "cve": "CVE-2024-7526",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-7526"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-7526",
          "url": "https://www.suse.com/security/cve/CVE-2024-7526"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1228648 for CVE-2024-7526",
          "url": "https://bugzilla.suse.com/1228648"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-7526"
    },
    {
      "cve": "CVE-2024-7527",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-7527"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-7527",
          "url": "https://www.suse.com/security/cve/CVE-2024-7527"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1228648 for CVE-2024-7527",
          "url": "https://bugzilla.suse.com/1228648"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-7527"
    },
    {
      "cve": "CVE-2024-7528",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-7528"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 128.1, and Thunderbird \u003c 128.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-7528",
          "url": "https://www.suse.com/security/cve/CVE-2024-7528"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1228648 for CVE-2024-7528",
          "url": "https://bugzilla.suse.com/1228648"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-7528"
    },
    {
      "cve": "CVE-2024-7529",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-7529"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-7529",
          "url": "https://www.suse.com/security/cve/CVE-2024-7529"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1228648 for CVE-2024-7529",
          "url": "https://bugzilla.suse.com/1228648"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-7529"
    },
    {
      "cve": "CVE-2024-8381",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-8381"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, Firefox ESR \u003c 115.15, Thunderbird \u003c 128.2, and Thunderbird \u003c 115.15.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-8381",
          "url": "https://www.suse.com/security/cve/CVE-2024-8381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229821 for CVE-2024-8381",
          "url": "https://bugzilla.suse.com/1229821"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-8381"
    },
    {
      "cve": "CVE-2024-8382",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-8382"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence would indicate certain browser features had been used, such as when a user opened the Dev Tools console. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, Firefox ESR \u003c 115.15, Thunderbird \u003c 128.2, and Thunderbird \u003c 115.15.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-8382",
          "url": "https://www.suse.com/security/cve/CVE-2024-8382"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229821 for CVE-2024-8382",
          "url": "https://bugzilla.suse.com/1229821"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-8382"
    },
    {
      "cve": "CVE-2024-8384",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-8384"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, Firefox ESR \u003c 115.15, Thunderbird \u003c 128.2, and Thunderbird \u003c 115.15.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-8384",
          "url": "https://www.suse.com/security/cve/CVE-2024-8384"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229821 for CVE-2024-8384",
          "url": "https://bugzilla.suse.com/1229821"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-8384"
    },
    {
      "cve": "CVE-2024-8385",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-8385"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, and Thunderbird \u003c 128.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-8385",
          "url": "https://www.suse.com/security/cve/CVE-2024-8385"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229821 for CVE-2024-8385",
          "url": "https://bugzilla.suse.com/1229821"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-8385"
    },
    {
      "cve": "CVE-2024-8386",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-8386"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, and Thunderbird \u003c 128.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-8386",
          "url": "https://www.suse.com/security/cve/CVE-2024-8386"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229821 for CVE-2024-8386",
          "url": "https://bugzilla.suse.com/1229821"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-8386"
    },
    {
      "cve": "CVE-2024-8387",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-8387"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, and Thunderbird \u003c 128.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-8387",
          "url": "https://www.suse.com/security/cve/CVE-2024-8387"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229821 for CVE-2024-8387",
          "url": "https://bugzilla.suse.com/1229821"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-8387"
    },
    {
      "cve": "CVE-2024-8394",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-8394"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 128.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-8394",
          "url": "https://www.suse.com/security/cve/CVE-2024-8394"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1229821 for CVE-2024-8394",
          "url": "https://bugzilla.suse.com/1229821"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.5:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.2.3-150200.8.177.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.2.3-150200.8.177.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-01T15:02:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-8394"
    }
  ]
}

CVE-2024-6612 (GCVE-0-2024-6612)

Vulnerability from cvelistv5

Published

2024-07-09 14:26

Modified

2024-09-12 15:48

Severity ?

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

CSP violation leakage when using devtools

Summary

CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox < 128 and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1880374
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla

Thunderbird

Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-6612",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-09T18:29:05.518517Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-17T16:07:10.562Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:04.060Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1880374"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Aidan Stephenson \u0026 Yannik Marchand"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
            }
          ],
          "value": "CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CSP violation leakage when using devtools",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-12T15:48:05.076Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1880374"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6612",
    "datePublished": "2024-07-09T14:26:00.305Z",
    "dateReserved": "2024-07-09T14:12:57.433Z",
    "dateUpdated": "2024-09-12T15:48:05.076Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6614 (GCVE-0-2024-6614)

Vulnerability from cvelistv5

Published

2024-07-09 14:26

Modified

2024-10-29 19:39

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CWE

Incorrect listing of stack frames

Summary

The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1902983
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla

Thunderbird

Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-6614",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-09T15:13:04.380729Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-835",
                "description": "CWE-835 Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-29T19:39:21.956Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:03.989Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1902983"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Nils Bars"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
            }
          ],
          "value": "The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Incorrect listing of stack frames",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-12T15:48:05.591Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1902983"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6614",
    "datePublished": "2024-07-09T14:26:00.836Z",
    "dateReserved": "2024-07-09T14:12:57.722Z",
    "dateUpdated": "2024-10-29T19:39:21.956Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-7521 (GCVE-0-2024-7521)

Vulnerability from cvelistv5

Published

2024-08-06 12:38

Modified

2024-08-07 20:58

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Incomplete WebAssembly exception handing

Summary

Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1904644
	https://www.mozilla.org/security/advisories/mfsa2024-33/
	https://www.mozilla.org/security/advisories/mfsa2024-34/
	https://www.mozilla.org/security/advisories/mfsa2024-35/
	https://www.mozilla.org/security/advisories/mfsa2024-37/
	https://www.mozilla.org/security/advisories/mfsa2024-38/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 129

Mozilla	Firefox ESR	Version: unspecified < 115.14
Mozilla	Firefox ESR	Version: unspecified < 128.1
Mozilla	Thunderbird	Version: unspecified < 128.1
Mozilla	Thunderbird	Version: unspecified < 115.14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "129",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "115.14",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.14",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7521",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-06T13:47:49.424097Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-755",
                "description": "CWE-755 Improper Handling of Exceptional Conditions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-07T20:58:56.811Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "129",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Nils Bars"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14."
            }
          ],
          "value": "Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Incomplete WebAssembly exception handing",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-06T22:21:42.664Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1904644"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-34/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-38/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-7521",
    "datePublished": "2024-08-06T12:38:13.406Z",
    "dateReserved": "2024-08-05T23:30:00.850Z",
    "dateUpdated": "2024-08-07T20:58:56.811Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-8384 (GCVE-0-2024-8384)

Vulnerability from cvelistv5

Published

2024-09-03 12:32

Modified

2024-09-06 18:31

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Garbage collection could mis-color cross-compartment objects in OOM conditions

Summary

The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird < 115.15.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1911288
	https://www.mozilla.org/security/advisories/mfsa2024-39/
	https://www.mozilla.org/security/advisories/mfsa2024-40/
	https://www.mozilla.org/security/advisories/mfsa2024-41/
	https://www.mozilla.org/security/advisories/mfsa2024-43/
	https://www.mozilla.org/security/advisories/mfsa2024-44/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 130

Mozilla	Firefox ESR	Version: unspecified < 128.2
Mozilla	Firefox ESR	Version: unspecified < 115.15
Mozilla	Thunderbird	Version: unspecified < 128.2
Mozilla	Thunderbird	Version: unspecified < 115.15

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "130",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.15",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-8384",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-03T15:49:08.611457Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-03T15:50:38.505Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "130",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "the Mozilla Fuzzing Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, Firefox ESR \u003c 115.15, Thunderbird \u003c 128.2, and Thunderbird \u003c 115.15."
            }
          ],
          "value": "The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, Firefox ESR \u003c 115.15, Thunderbird \u003c 128.2, and Thunderbird \u003c 115.15."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Garbage collection could mis-color cross-compartment objects in OOM conditions",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-06T18:31:03.084Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1911288"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-39/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-40/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-41/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-43/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-44/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-8384",
    "datePublished": "2024-09-03T12:32:18.656Z",
    "dateReserved": "2024-09-03T06:39:10.177Z",
    "dateUpdated": "2024-09-06T18:31:03.084Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6613 (GCVE-0-2024-6613)

Vulnerability from cvelistv5

Published

2024-07-09 14:26

Modified

2025-03-13 17:51

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

Incorrect listing of stack frames

Summary

The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1900523
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla

Thunderbird

Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-6613",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-22T17:43:42.615761Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-209",
                "description": "CWE-209 Generation of Error Message Containing Sensitive Information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T17:51:38.148Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:03.948Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1900523"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Nils Bars"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
            }
          ],
          "value": "The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Incorrect listing of stack frames",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-12T15:48:05.315Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1900523"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6613",
    "datePublished": "2024-07-09T14:26:00.593Z",
    "dateReserved": "2024-07-09T14:12:57.582Z",
    "dateUpdated": "2025-03-13T17:51:38.148Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-7526 (GCVE-0-2024-7526)

Vulnerability from cvelistv5

Published

2024-08-06 12:38

Modified

2024-09-17 18:14

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

Uninitialized memory used by WebGL

Summary

ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1910306
	https://www.mozilla.org/security/advisories/mfsa2024-33/
	https://www.mozilla.org/security/advisories/mfsa2024-34/
	https://www.mozilla.org/security/advisories/mfsa2024-35/
	https://www.mozilla.org/security/advisories/mfsa2024-37/
	https://www.mozilla.org/security/advisories/mfsa2024-38/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 129

Mozilla	Firefox ESR	Version: unspecified < 115.14
Mozilla	Firefox ESR	Version: unspecified < 128.1
Mozilla	Thunderbird	Version: unspecified < 128.1
Mozilla	Thunderbird	Version: unspecified < 115.14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "129",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "115.14",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.14",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7526",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-07T20:50:27.888118Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-908",
                "description": "CWE-908 Use of Uninitialized Resource",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-07T20:54:02.143Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "129",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "s48gs.w"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14."
            }
          ],
          "value": "ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Uninitialized memory used by WebGL",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-17T18:14:47.411Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1910306"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-34/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-38/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-7526",
    "datePublished": "2024-08-06T12:38:14.456Z",
    "dateReserved": "2024-08-05T23:30:13.451Z",
    "dateUpdated": "2024-09-17T18:14:47.411Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6608 (GCVE-0-2024-6608)

Vulnerability from cvelistv5

Published

2024-07-09 14:25

Modified

2025-03-25 16:10

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE

Cursor could be moved out of the viewport using pointerlock.

Summary

It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1743329
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla

Thunderbird

Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-6608",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-09T15:06:03.249641Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-25T16:10:43.127Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:04.019Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1743329"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Irvan Kurniawan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
            }
          ],
          "value": "It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cursor could be moved out of the viewport using pointerlock.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-12T15:48:03.945Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1743329"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6608",
    "datePublished": "2024-07-09T14:25:58.862Z",
    "dateReserved": "2024-07-09T14:12:56.991Z",
    "dateUpdated": "2025-03-25T16:10:43.127Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6611 (GCVE-0-2024-6611)

Vulnerability from cvelistv5

Published

2024-07-09 14:25

Modified

2025-03-13 14:50

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Incorrect handling of SameSite cookies

Summary

A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox < 128 and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1844827
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla

Thunderbird

Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-6611",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-09T16:54:42.625563Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1275",
                "description": "CWE-1275 Sensitive Cookie with Improper SameSite Attribute",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T14:50:26.388Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:04.049Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1844827"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Pedro Bernardo"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
            }
          ],
          "value": "A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Incorrect handling of SameSite cookies",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-12T15:48:04.815Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1844827"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6611",
    "datePublished": "2024-07-09T14:25:59.748Z",
    "dateReserved": "2024-07-09T14:12:57.319Z",
    "dateUpdated": "2025-03-13T14:50:26.388Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-8382 (GCVE-0-2024-8382)

Vulnerability from cvelistv5

Published

2024-09-03 12:32

Modified

2024-10-30 16:48

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran

Summary

Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence would indicate certain browser features had been used, such as when a user opened the Dev Tools console. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird < 115.15.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1906744
	https://www.mozilla.org/security/advisories/mfsa2024-39/
	https://www.mozilla.org/security/advisories/mfsa2024-40/
	https://www.mozilla.org/security/advisories/mfsa2024-41/
	https://www.mozilla.org/security/advisories/mfsa2024-43/
	https://www.mozilla.org/security/advisories/mfsa2024-44/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 130

Mozilla	Firefox ESR	Version: unspecified < 128.2
Mozilla	Firefox ESR	Version: unspecified < 115.15
Mozilla	Thunderbird	Version: unspecified < 128.2
Mozilla	Thunderbird	Version: unspecified < 115.15

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "130",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.15",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.15",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-8382",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-30T16:38:10.647160Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-273",
                "description": "CWE-273 Improper Check for Dropped Privileges",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-30T16:48:49.040Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "130",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Gregory Pappas"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence would indicate certain browser features had been used, such as when a user opened the Dev Tools console. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, Firefox ESR \u003c 115.15, Thunderbird \u003c 128.2, and Thunderbird \u003c 115.15."
            }
          ],
          "value": "Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence would indicate certain browser features had been used, such as when a user opened the Dev Tools console. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, Firefox ESR \u003c 115.15, Thunderbird \u003c 128.2, and Thunderbird \u003c 115.15."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-06T18:31:00.792Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1906744"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-39/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-40/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-41/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-43/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-44/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-8382",
    "datePublished": "2024-09-03T12:32:18.066Z",
    "dateReserved": "2024-09-03T06:39:05.212Z",
    "dateUpdated": "2024-10-30T16:48:49.040Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6615 (GCVE-0-2024-6615)

Vulnerability from cvelistv5

Published

2024-07-09 14:26

Modified

2024-11-06 14:46

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Memory safety bugs fixed in Firefox 128 and Thunderbird 128

Summary

Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128 and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1892875%2C1894428%2C1898364
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla

Thunderbird

Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-6615",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-09T15:05:12.270889Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-06T14:46:20.795Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:04.046Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Memory safety bugs fixed in Firefox 128 and Thunderbird 128",
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1892875%2C1894428%2C1898364"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "the Mozilla Fuzzing Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
            }
          ],
          "value": "Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 128 and Thunderbird 128",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-12T15:48:05.854Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox 128 and Thunderbird 128",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1892875%2C1894428%2C1898364"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6615",
    "datePublished": "2024-07-09T14:26:01.065Z",
    "dateReserved": "2024-07-09T14:12:57.830Z",
    "dateUpdated": "2024-11-06T14:46:20.795Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-8381 (GCVE-0-2024-8381)

Vulnerability from cvelistv5

Published

2024-09-03 12:32

Modified

2024-09-06 18:30

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Type confusion when looking up a property name in a "with" block

Summary

A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird < 115.15.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1912715
	https://www.mozilla.org/security/advisories/mfsa2024-39/
	https://www.mozilla.org/security/advisories/mfsa2024-40/
	https://www.mozilla.org/security/advisories/mfsa2024-41/
	https://www.mozilla.org/security/advisories/mfsa2024-43/
	https://www.mozilla.org/security/advisories/mfsa2024-44/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 130

Mozilla	Firefox ESR	Version: unspecified < 128.2
Mozilla	Firefox ESR	Version: unspecified < 115.15
Mozilla	Thunderbird	Version: unspecified < 128.2
Mozilla	Thunderbird	Version: unspecified < 115.15

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "130",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.15",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-8381",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-03T15:55:45.647342Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-843",
                "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-03T15:57:38.939Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "130",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Nils Bars"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the \u003ccode\u003ewith\u003c/code\u003e environment. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, Firefox ESR \u003c 115.15, Thunderbird \u003c 128.2, and Thunderbird \u003c 115.15."
            }
          ],
          "value": "A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, Firefox ESR \u003c 115.15, Thunderbird \u003c 128.2, and Thunderbird \u003c 115.15."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Type confusion when looking up a property name in a \"with\" block",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-06T18:30:59.560Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1912715"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-39/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-40/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-41/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-43/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-44/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-8381",
    "datePublished": "2024-09-03T12:32:17.682Z",
    "dateReserved": "2024-09-03T06:39:02.971Z",
    "dateUpdated": "2024-09-06T18:30:59.560Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-7525 (GCVE-0-2024-7525)

Vulnerability from cvelistv5

Published

2024-08-06 12:38

Modified

2024-08-06 22:21

Severity ?

9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE

Missing permission check when creating a StreamFilter

Summary

It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1909298
	https://www.mozilla.org/security/advisories/mfsa2024-33/
	https://www.mozilla.org/security/advisories/mfsa2024-34/
	https://www.mozilla.org/security/advisories/mfsa2024-35/
	https://www.mozilla.org/security/advisories/mfsa2024-37/
	https://www.mozilla.org/security/advisories/mfsa2024-38/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 129

Mozilla	Firefox ESR	Version: unspecified < 115.14
Mozilla	Firefox ESR	Version: unspecified < 128.1
Mozilla	Thunderbird	Version: unspecified < 128.1
Mozilla	Thunderbird	Version: unspecified < 115.14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "129",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "115.14",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7525",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-06T19:11:59.565244Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:27:30.486Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "129",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Rob Wu"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "It was possible for a web extension with minimal permissions to create a \u003ccode\u003eStreamFilter\u003c/code\u003e which could be used to read and modify the response body of requests on any site. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14."
            }
          ],
          "value": "It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Missing permission check when creating a StreamFilter",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-06T22:21:43.959Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1909298"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-34/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-38/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-7525",
    "datePublished": "2024-08-06T12:38:14.195Z",
    "dateReserved": "2024-08-05T23:30:11.298Z",
    "dateUpdated": "2024-08-06T22:21:43.959Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6602 (GCVE-0-2024-6602)

Vulnerability from cvelistv5

Published

2024-07-09 14:25

Modified

2025-03-14 18:50

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Memory corruption in NSS

Summary

A mismatch between allocator and deallocator could have led to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1895032
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-30/
	https://www.mozilla.org/security/advisories/mfsa2024-31/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla	Firefox ESR	Version: unspecified < 115.13
Mozilla	Thunderbird	Version: unspecified < 115.13
Mozilla	Thunderbird	Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "115.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-6602",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-09T16:54:31.956156Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-14T18:50:48.163Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:03.998Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1895032"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ronald Crane"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A mismatch between allocator and deallocator could have led to memory corruption. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128."
            }
          ],
          "value": "A mismatch between allocator and deallocator could have led to memory corruption. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory corruption in NSS",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-26T13:34:06.338Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1895032"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6602",
    "datePublished": "2024-07-09T14:25:57.026Z",
    "dateReserved": "2024-07-09T14:12:56.296Z",
    "dateUpdated": "2025-03-14T18:50:48.163Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-7518 (GCVE-0-2024-7518)

Vulnerability from cvelistv5

Published

2024-08-06 12:38

Modified

2024-10-29 19:51

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE

Fullscreen notification dialog can be obscured by document content

Summary

Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1875354
	https://www.mozilla.org/security/advisories/mfsa2024-33/
	https://www.mozilla.org/security/advisories/mfsa2024-35/
	https://www.mozilla.org/security/advisories/mfsa2024-37/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 129

	Mozilla	Firefox ESR	Version: unspecified < 128.1
	Mozilla	Thunderbird	Version: unspecified < 128.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7518",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-06T17:58:37.256105Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1021",
                "description": "CWE-1021 Improper Restriction of Rendered UI Layers or Frames",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-29T19:51:38.686Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "129",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Shaheen Fazim"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 128.1, and Thunderbird \u003c 128.1."
            }
          ],
          "value": "Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 128.1, and Thunderbird \u003c 128.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Fullscreen notification dialog can be obscured by document content",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-06T22:21:40.998Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1875354"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-7518",
    "datePublished": "2024-08-06T12:38:12.470Z",
    "dateReserved": "2024-08-05T23:29:53.211Z",
    "dateUpdated": "2024-10-29T19:51:38.686Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-7522 (GCVE-0-2024-7522)

Vulnerability from cvelistv5

Published

2024-08-06 12:38

Modified

2024-08-08 16:02

Severity ?

9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CWE

Out of bounds read in editor component

Summary

Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1906727
	https://www.mozilla.org/security/advisories/mfsa2024-33/
	https://www.mozilla.org/security/advisories/mfsa2024-34/
	https://www.mozilla.org/security/advisories/mfsa2024-35/
	https://www.mozilla.org/security/advisories/mfsa2024-37/
	https://www.mozilla.org/security/advisories/mfsa2024-38/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 129

Mozilla	Firefox ESR	Version: unspecified < 115.14
Mozilla	Firefox ESR	Version: unspecified < 128.1
Mozilla	Thunderbird	Version: unspecified < 128.1
Mozilla	Thunderbird	Version: unspecified < 115.14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "129",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "115.14",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.14",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7522",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-08T15:56:53.271108Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-08T16:02:54.096Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "129",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Irvan Kurniawan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14."
            }
          ],
          "value": "Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out of bounds read in editor component",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-06T22:21:43.311Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1906727"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-34/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-38/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-7522",
    "datePublished": "2024-08-06T12:38:13.630Z",
    "dateReserved": "2024-08-05T23:30:03.058Z",
    "dateUpdated": "2024-08-08T16:02:54.096Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-8387 (GCVE-0-2024-8387)

Vulnerability from cvelistv5

Published

2024-09-03 12:32

Modified

2024-09-06 18:31

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2

Summary

Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.

References

►

URL

Tags

	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1857607%2C1911858%2C1914009
	https://www.mozilla.org/security/advisories/mfsa2024-39/
	https://www.mozilla.org/security/advisories/mfsa2024-40/
	https://www.mozilla.org/security/advisories/mfsa2024-43/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 130

	Mozilla	Firefox ESR	Version: unspecified < 128.2
	Mozilla	Thunderbird	Version: unspecified < 128.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "130",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-8387",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-03T15:41:12.477826Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-03T15:43:16.565Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "130",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Yury Delendik, the Mozilla Fuzzing Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, and Thunderbird \u003c 128.2."
            }
          ],
          "value": "Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, and Thunderbird \u003c 128.2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-06T18:31:07.603Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1857607%2C1911858%2C1914009"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-39/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-40/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-43/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-8387",
    "datePublished": "2024-09-03T12:32:19.490Z",
    "dateReserved": "2024-09-03T06:39:16.291Z",
    "dateUpdated": "2024-09-06T18:31:07.603Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-7519 (GCVE-0-2024-7519)

Vulnerability from cvelistv5

Published

2024-08-06 12:38

Modified

2024-08-07 20:49

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Out of bounds memory access in graphics shared memory handling

Summary

Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1902307
	https://www.mozilla.org/security/advisories/mfsa2024-33/
	https://www.mozilla.org/security/advisories/mfsa2024-34/
	https://www.mozilla.org/security/advisories/mfsa2024-35/
	https://www.mozilla.org/security/advisories/mfsa2024-37/
	https://www.mozilla.org/security/advisories/mfsa2024-38/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 129

Mozilla	Firefox ESR	Version: unspecified < 115.14
Mozilla	Firefox ESR	Version: unspecified < 128.1
Mozilla	Thunderbird	Version: unspecified < 128.1
Mozilla	Thunderbird	Version: unspecified < 115.14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "129",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "115.14",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7519",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-07T20:42:21.352822Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-07T20:49:22.889Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "129",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "dalmurino"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14."
            }
          ],
          "value": "Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out of bounds memory access in graphics shared memory handling",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-06T22:21:41.535Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1902307"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-34/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-38/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-7519",
    "datePublished": "2024-08-06T12:38:12.854Z",
    "dateReserved": "2024-08-05T23:29:56.115Z",
    "dateUpdated": "2024-08-07T20:49:22.889Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6607 (GCVE-0-2024-6607)

Vulnerability from cvelistv5

Published

2024-07-09 14:25

Modified

2024-09-12 15:48

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Leaving pointerlock by pressing the escape key could be prevented

Summary

It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `<select>` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox < 128 and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1694513
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla

Thunderbird

Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-6607",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-15T21:34:59.996350Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-763",
                "description": "CWE-763 Release of Invalid Pointer or Reference",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-17T20:21:05.514Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:03.973Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1694513"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Irvan Kurniawan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a \u003ccode\u003e\u0026lt;select\u0026gt;\u003c/code\u003e element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
            }
          ],
          "value": "It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `\u0026lt;select\u0026gt;` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Leaving pointerlock by pressing the escape key could be prevented",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-12T15:48:03.646Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1694513"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6607",
    "datePublished": "2024-07-09T14:25:58.566Z",
    "dateReserved": "2024-07-09T14:12:56.881Z",
    "dateUpdated": "2024-09-12T15:48:03.646Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-7520 (GCVE-0-2024-7520)

Vulnerability from cvelistv5

Published

2024-08-06 12:38

Modified

2025-03-24 16:39

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Type confusion in WebAssembly

Summary

A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1903041
	https://www.mozilla.org/security/advisories/mfsa2024-33/
	https://www.mozilla.org/security/advisories/mfsa2024-35/
	https://www.mozilla.org/security/advisories/mfsa2024-37/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 129

	Mozilla	Firefox ESR	Version: unspecified < 128.1
	Mozilla	Thunderbird	Version: unspecified < 128.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "129",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7520",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-06T15:23:43.922347Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-24T16:39:36.894Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "129",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Nan Wang"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 128.1, and Thunderbird \u003c 128.1."
            }
          ],
          "value": "A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 128.1, and Thunderbird \u003c 128.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Type confusion in WebAssembly",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-06T22:21:42.092Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1903041"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-7520",
    "datePublished": "2024-08-06T12:38:13.117Z",
    "dateReserved": "2024-08-05T23:29:58.469Z",
    "dateUpdated": "2025-03-24T16:39:36.894Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6610 (GCVE-0-2024-6610)

Vulnerability from cvelistv5

Published

2024-07-09 14:25

Modified

2025-03-18 20:44

Severity ?

6.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWE

Form validation popups could block exiting full-screen mode

Summary

Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox < 128 and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1883396
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla

Thunderbird

Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 6.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-6610",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-23T19:20:40.493290Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-451",
                "description": "CWE-451 User Interface (UI) Misrepresentation of Critical Information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-18T20:44:54.720Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:03.956Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1883396"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Raphael"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
            }
          ],
          "value": "Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Form validation popups could block exiting full-screen mode",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-12T15:48:04.528Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1883396"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6610",
    "datePublished": "2024-07-09T14:25:59.460Z",
    "dateReserved": "2024-07-09T14:12:57.227Z",
    "dateUpdated": "2025-03-18T20:44:54.720Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6606 (GCVE-0-2024-6606)

Vulnerability from cvelistv5

Published

2024-07-09 14:25

Modified

2025-03-25 13:26

Severity ?

8.2 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L

CWE

Out-of-bounds read in clipboard component

Summary

Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 128 and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1902305
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla

Thunderbird

Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 8.2,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-6606",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-10T14:06:12.186692Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-25T13:26:37.256Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:04.043Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1902305"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "dalmurino"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
            }
          ],
          "value": "Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out-of-bounds read in clipboard component",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-26T13:34:04.535Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1902305"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6606",
    "datePublished": "2024-07-09T14:25:58.357Z",
    "dateReserved": "2024-07-09T14:12:56.762Z",
    "dateUpdated": "2025-03-25T13:26:37.256Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-8385 (GCVE-0-2024-8385)

Vulnerability from cvelistv5

Published

2024-09-03 12:32

Modified

2024-09-06 18:31

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

WASM type confusion involving ArrayTypes

Summary

A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1911909
	https://www.mozilla.org/security/advisories/mfsa2024-39/
	https://www.mozilla.org/security/advisories/mfsa2024-40/
	https://www.mozilla.org/security/advisories/mfsa2024-43/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 130

	Mozilla	Firefox ESR	Version: unspecified < 128.2
	Mozilla	Thunderbird	Version: unspecified < 128.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "130",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-8385",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-03T15:46:49.316374Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-843",
                "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-03T15:47:53.001Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "130",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Seunghyun Lee"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, and Thunderbird \u003c 128.2."
            }
          ],
          "value": "A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, and Thunderbird \u003c 128.2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "WASM type confusion involving ArrayTypes",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-06T18:31:04.224Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1911909"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-39/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-40/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-43/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-8385",
    "datePublished": "2024-09-03T12:32:18.964Z",
    "dateReserved": "2024-09-03T06:39:12.097Z",
    "dateUpdated": "2024-09-06T18:31:04.224Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6600 (GCVE-0-2024-6600)

Vulnerability from cvelistv5

Published

2024-07-09 14:25

Modified

2024-10-29 19:36

Severity ?

6.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE

Memory corruption in WebGL API

Summary

Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on mac OS. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1888340
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-30/
	https://www.mozilla.org/security/advisories/mfsa2024-31/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla	Firefox ESR	Version: unspecified < 115.13
Mozilla	Thunderbird	Version: unspecified < 115.13
Mozilla	Thunderbird	Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:03.960Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1888340"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 6.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-6600",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-22T16:08:57.939610Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-29T19:36:35.485Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "pwn2car"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on mac OS. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128."
            }
          ],
          "value": "Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on mac OS. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory corruption in WebGL API",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-12T15:48:01.951Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1888340"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6600",
    "datePublished": "2024-07-09T14:25:56.437Z",
    "dateReserved": "2024-07-09T14:12:56.032Z",
    "dateUpdated": "2024-10-29T19:36:35.485Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-8394 (GCVE-0-2024-8394)

Vulnerability from cvelistv5

Published

2024-09-06 16:16

Modified

2025-03-19 17:45

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

Crash when aborting verification of OTR chat

Summary

When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 128.2.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1895737
	https://www.mozilla.org/security/advisories/mfsa2024-43/

Impacted products

	Vendor	Product	Version
	Mozilla	Thunderbird	Version: unspecified < 128.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-8394",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-06T19:38:19.113129Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-19T17:45:27.550Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Thunderbird Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 128.2."
            }
          ],
          "value": "When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 128.2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Crash when aborting verification of OTR chat",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-06T18:31:09.848Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1895737"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-43/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-8394",
    "datePublished": "2024-09-06T16:16:34.969Z",
    "dateReserved": "2024-09-03T15:56:45.167Z",
    "dateUpdated": "2025-03-19T17:45:27.550Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6609 (GCVE-0-2024-6609)

Vulnerability from cvelistv5

Published

2024-07-09 14:25

Modified

2025-03-13 14:58

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Memory corruption in NSS

Summary

When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox < 128 and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1839258
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla

Thunderbird

Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:03.946Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1839258"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-6609",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-22T19:02:00.882338Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T14:58:08.109Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Irvan Kurniawan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
            }
          ],
          "value": "When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox \u003c 128 and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory corruption in NSS",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-12T15:48:04.264Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1839258"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6609",
    "datePublished": "2024-07-09T14:25:59.075Z",
    "dateReserved": "2024-07-09T14:12:57.118Z",
    "dateUpdated": "2025-03-13T14:58:08.109Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-7529 (GCVE-0-2024-7529)

Vulnerability from cvelistv5

Published

2024-08-06 12:38

Modified

2024-08-07 20:55

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE

Document content could partially obscure security prompts

Summary

The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1903187
	https://www.mozilla.org/security/advisories/mfsa2024-33/
	https://www.mozilla.org/security/advisories/mfsa2024-34/
	https://www.mozilla.org/security/advisories/mfsa2024-35/
	https://www.mozilla.org/security/advisories/mfsa2024-37/
	https://www.mozilla.org/security/advisories/mfsa2024-38/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 129

Mozilla	Firefox ESR	Version: unspecified < 115.14
Mozilla	Firefox ESR	Version: unspecified < 128.1
Mozilla	Thunderbird	Version: unspecified < 128.1
Mozilla	Thunderbird	Version: unspecified < 115.14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "129",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "115.14",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "114.14",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7529",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-06T13:32:01.203965Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-451",
                "description": "CWE-451 User Interface (UI) Misrepresentation of Critical Information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-07T20:55:22.507Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "129",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Hafiizh"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14."
            }
          ],
          "value": "The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Document content could partially obscure security prompts",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-06T22:21:46.397Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1903187"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-34/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-38/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-7529",
    "datePublished": "2024-08-06T12:38:15.245Z",
    "dateReserved": "2024-08-05T23:30:20.798Z",
    "dateUpdated": "2024-08-07T20:55:22.507Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6603 (GCVE-0-2024-6603)

Vulnerability from cvelistv5

Published

2024-07-09 14:25

Modified

2024-09-12 15:48

Severity ?

7.4 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE

Memory corruption in thread creation

Summary

In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1895081
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-30/
	https://www.mozilla.org/security/advisories/mfsa2024-31/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla	Firefox ESR	Version: unspecified < 115.13
Mozilla	Thunderbird	Version: unspecified < 115.13
Mozilla	Thunderbird	Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "115.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-6603",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-11T15:12:02.087651Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-823",
                "description": "CWE-823 Use of Out-of-range Pointer Offset",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-11T15:14:25.435Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:04.040Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1895081"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Irvan Kurniawan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128."
            }
          ],
          "value": "In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory corruption in thread creation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-12T15:48:02.807Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1895081"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6603",
    "datePublished": "2024-07-09T14:25:57.402Z",
    "dateReserved": "2024-07-09T14:12:56.417Z",
    "dateUpdated": "2024-09-12T15:48:02.807Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6604 (GCVE-0-2024-6604)

Vulnerability from cvelistv5

Published

2024-07-09 14:25

Modified

2024-11-12 15:20

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13

Summary

Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1748105%2C1837550%2C1884266
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-30/
	https://www.mozilla.org/security/advisories/mfsa2024-31/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla	Firefox ESR	Version: unspecified < 115.13
Mozilla	Thunderbird	Version: unspecified < 115.13
Mozilla	Thunderbird	Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-6604",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-12T15:20:14.908974Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-12T15:20:53.171Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:03.940Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13",
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1748105%2C1837550%2C1884266"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Randell Jesup"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128."
            }
          ],
          "value": "Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-12T15:48:03.092Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1748105%2C1837550%2C1884266"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6604",
    "datePublished": "2024-07-09T14:25:57.691Z",
    "dateReserved": "2024-07-09T14:12:56.509Z",
    "dateUpdated": "2024-11-12T15:20:53.171Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-7528 (GCVE-0-2024-7528)

Vulnerability from cvelistv5

Published

2024-08-06 12:38

Modified

2024-08-09 15:10

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Use-after-free in IndexedDB

Summary

Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1895951
	https://www.mozilla.org/security/advisories/mfsa2024-33/
	https://www.mozilla.org/security/advisories/mfsa2024-35/
	https://www.mozilla.org/security/advisories/mfsa2024-37/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 129

	Mozilla	Firefox ESR	Version: unspecified < 128.1
	Mozilla	Thunderbird	Version: unspecified < 128.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "129",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7528",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-09T15:09:03.109664Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-09T15:10:55.362Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "129",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jason Kratzer"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 128.1, and Thunderbird \u003c 128.1."
            }
          ],
          "value": "Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 128.1, and Thunderbird \u003c 128.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in IndexedDB",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-06T22:21:45.849Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1895951"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-7528",
    "datePublished": "2024-08-06T12:38:14.946Z",
    "dateReserved": "2024-08-05T23:30:18.271Z",
    "dateUpdated": "2024-08-09T15:10:55.362Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-8386 (GCVE-0-2024-8386)

Vulnerability from cvelistv5

Published

2024-09-03 12:32

Modified

2024-11-21 15:06

Severity ?

6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

SelectElements could be shown over another site if popups are allowed

Summary

If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1907032
	https://bugzilla.mozilla.org/show_bug.cgi?id=1909163
	https://bugzilla.mozilla.org/show_bug.cgi?id=1909529
	https://www.mozilla.org/security/advisories/mfsa2024-39/
	https://www.mozilla.org/security/advisories/mfsa2024-40/
	https://www.mozilla.org/security/advisories/mfsa2024-43/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 130

	Mozilla	Firefox ESR	Version: unspecified < 128.2
	Mozilla	Thunderbird	Version: unspecified < 128.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-8386",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-03T15:44:49.005338Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-290",
                "description": "CWE-290 Authentication Bypass by Spoofing",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-21T15:06:53.584Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "130",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Shaheen Fazim, Hafiizh"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, and Thunderbird \u003c 128.2."
            }
          ],
          "value": "If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack. This vulnerability affects Firefox \u003c 130, Firefox ESR \u003c 128.2, and Thunderbird \u003c 128.2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "SelectElements could be shown over another site if popups are allowed",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-06T18:31:06.466Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1907032"
        },
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1909163"
        },
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1909529"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-39/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-40/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-43/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-8386",
    "datePublished": "2024-09-03T12:32:19.249Z",
    "dateReserved": "2024-09-03T06:39:14.172Z",
    "dateUpdated": "2024-11-21T15:06:53.584Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6601 (GCVE-0-2024-6601)

Vulnerability from cvelistv5

Published

2024-07-09 14:25

Modified

2024-12-06 17:31

Severity ?

4.7 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

CWE

Race condition in permission assignment

Summary

A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1890748
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-30/
	https://www.mozilla.org/security/advisories/mfsa2024-31/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 128

Mozilla	Firefox ESR	Version: unspecified < 115.13
Mozilla	Thunderbird	Version: unspecified < 115.13
Mozilla	Thunderbird	Version: unspecified < 128

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 4.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-6601",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-23T19:21:13.166814Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-367",
                "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-06T17:31:33.808Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:41:03.971Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1890748"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Andreas Farre"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128."
            }
          ],
          "value": "A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox \u003c 128, Firefox ESR \u003c 115.13, Thunderbird \u003c 115.13, and Thunderbird \u003c 128."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Race condition in permission assignment",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-12T15:48:02.232Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1890748"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-6601",
    "datePublished": "2024-07-09T14:25:56.733Z",
    "dateReserved": "2024-07-09T14:12:56.169Z",
    "dateUpdated": "2024-12-06T17:31:33.808Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-7527 (GCVE-0-2024-7527)

Vulnerability from cvelistv5

Published

2024-08-06 12:38

Modified

2025-03-18 19:05

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Use-after-free in JavaScript garbage collection

Summary

Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1871303
	https://www.mozilla.org/security/advisories/mfsa2024-33/
	https://www.mozilla.org/security/advisories/mfsa2024-34/
	https://www.mozilla.org/security/advisories/mfsa2024-35/
	https://www.mozilla.org/security/advisories/mfsa2024-37/
	https://www.mozilla.org/security/advisories/mfsa2024-38/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 129

Mozilla	Firefox ESR	Version: unspecified < 115.14
Mozilla	Firefox ESR	Version: unspecified < 128.1
Mozilla	Thunderbird	Version: unspecified < 128.1
Mozilla	Thunderbird	Version: unspecified < 115.14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "129",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox_esr:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox_esr",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "115.14",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "128.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "115.14",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7527",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-06T15:19:12.802827Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-18T19:05:01.797Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "129",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Norisz Fay"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14."
            }
          ],
          "value": "Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, Firefox ESR \u003c 128.1, Thunderbird \u003c 128.1, and Thunderbird \u003c 115.14."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in JavaScript garbage collection",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-06T22:21:45.319Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1871303"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-34/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-38/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-7527",
    "datePublished": "2024-08-06T12:38:14.698Z",
    "dateReserved": "2024-08-05T23:30:16.029Z",
    "dateUpdated": "2025-03-18T19:05:01.797Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2024:3507-1

Vulnerability from csaf_suse

CVE-2024-6612 (GCVE-0-2024-6612)

Vulnerability from cvelistv5

CVE-2024-6614 (GCVE-0-2024-6614)

Vulnerability from cvelistv5

CVE-2024-7521 (GCVE-0-2024-7521)

Vulnerability from cvelistv5

CVE-2024-8384 (GCVE-0-2024-8384)

Vulnerability from cvelistv5

CVE-2024-6613 (GCVE-0-2024-6613)

Vulnerability from cvelistv5

CVE-2024-7526 (GCVE-0-2024-7526)

Vulnerability from cvelistv5

CVE-2024-6608 (GCVE-0-2024-6608)

Vulnerability from cvelistv5

CVE-2024-6611 (GCVE-0-2024-6611)

Vulnerability from cvelistv5

CVE-2024-8382 (GCVE-0-2024-8382)

Vulnerability from cvelistv5

CVE-2024-6615 (GCVE-0-2024-6615)

Vulnerability from cvelistv5

CVE-2024-8381 (GCVE-0-2024-8381)

Vulnerability from cvelistv5

CVE-2024-7525 (GCVE-0-2024-7525)

Vulnerability from cvelistv5

CVE-2024-6602 (GCVE-0-2024-6602)

Vulnerability from cvelistv5

CVE-2024-7518 (GCVE-0-2024-7518)

Vulnerability from cvelistv5

CVE-2024-7522 (GCVE-0-2024-7522)

Vulnerability from cvelistv5

CVE-2024-8387 (GCVE-0-2024-8387)

Vulnerability from cvelistv5

CVE-2024-7519 (GCVE-0-2024-7519)

Vulnerability from cvelistv5

CVE-2024-6607 (GCVE-0-2024-6607)

Vulnerability from cvelistv5

CVE-2024-7520 (GCVE-0-2024-7520)

Vulnerability from cvelistv5

CVE-2024-6610 (GCVE-0-2024-6610)

Vulnerability from cvelistv5

CVE-2024-6606 (GCVE-0-2024-6606)

Vulnerability from cvelistv5

CVE-2024-8385 (GCVE-0-2024-8385)

Vulnerability from cvelistv5

CVE-2024-6600 (GCVE-0-2024-6600)

Vulnerability from cvelistv5

CVE-2024-8394 (GCVE-0-2024-8394)

Vulnerability from cvelistv5

CVE-2024-6609 (GCVE-0-2024-6609)

Vulnerability from cvelistv5

CVE-2024-7529 (GCVE-0-2024-7529)

Vulnerability from cvelistv5

CVE-2024-6603 (GCVE-0-2024-6603)

Vulnerability from cvelistv5

CVE-2024-6604 (GCVE-0-2024-6604)

Vulnerability from cvelistv5

CVE-2024-7528 (GCVE-0-2024-7528)

Vulnerability from cvelistv5

CVE-2024-8386 (GCVE-0-2024-8386)

Vulnerability from cvelistv5

CVE-2024-6601 (GCVE-0-2024-6601)

Vulnerability from cvelistv5

CVE-2024-7527 (GCVE-0-2024-7527)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature