csaf_suse - suse-su-2025:02546-1

suse-su-2025:02546-1

Vulnerability from csaf_suse

Published

2025-07-30 07:34

Modified

2025-07-30 07:34

Summary

Security update for MozillaThunderbird

Notes

Title of the patch

Security update for MozillaThunderbird

Description of the patch

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.1 (MFSA 2025-63) (bsc#1246664): - CVE-2025-8027: JavaScript engine only wrote partial return value to stack (bmo#1968423) - CVE-2025-8028: Large branch table could lead to truncated instruction (bmo#1971581) - CVE-2025-8029: javascript: URLs executed on object and embed tags (bmo#1928021) - CVE-2025-8036: DNS rebinding circumvents CORS (bmo#1960834) - CVE-2025-8037: Nameless cookies shadow secure cookies (bmo#1964767) - CVE-2025-8030: Potential user-assisted code execution in 'Copy as cURL' command (bmo#1968414) - CVE-2025-8031: Incorrect URL stripping in CSP reports (bmo#1971719) - CVE-2025-8032: XSLT documents could bypass CSP (bmo#1974407) - CVE-2025-8038: CSP frame-src was not correctly enforced for paths (bmo#1808979) - CVE-2025-8039: Search terms persisted in URL bar (bmo#1970997) - CVE-2025-8033: Incorrect JavaScript state machine for generators (bmo#1973990) - CVE-2025-8034: Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422) - CVE-2025-8040: Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998) - CVE-2025-8035: Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 (bmo#1975961, bmo#1975961, bmo#1975961) Update to Mozilla Thunderbird 140.0.1 (MFSA 2025-54) (bsc#1244670): - CVE-2025-6424: Use-after-free in FontFaceSet (bmo#1966423) - CVE-2025-6425: The WebCompat WebExtension shipped exposed a persistent UUID (bmo#1717672) - CVE-2025-6426: No warning when opening executable terminal files on macOS (bmo#1964385) - CVE-2025-6427: connect-src Content Security Policy restriction could be bypassed (bmo#1966927) - CVE-2025-6429: Incorrect parsing of URLs could have allowed embedding of youtube.com (bmo#1970658) - CVE-2025-6430: Content-Disposition header ignored when a file is included in an embed or object tag (bmo#1971140) - CVE-2025-6432: DNS Requests leaked outside of a configured SOCKS proxy (bmo#1943804) - CVE-2025-6433: WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate (bmo#1954033) - CVE-2025-6434: HTTPS-Only exception screen lacked anti-clickjacking delay (bmo#1955182) - CVE-2025-6435: Save as in Devtools could download files without sanitizing the extension (bmo#1950056, bmo#1961777) - CVE-2025-6436: Memory safety bugs fixed in Firefox 140 and Thunderbird 140 (bmo#1941377, bmo#1960948, bmo#1966187, bmo#1966505, bmo#1970764)

Patchnames

SUSE-2025-2546,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-2546,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-2546,SUSE-SLE-Product-WE-15-SP6-2025-2546,SUSE-SLE-Product-WE-15-SP7-2025-2546,openSUSE-SLE-15.6-2025-2546

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for MozillaThunderbird",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for MozillaThunderbird fixes the following issues:\n\nUpdate to Mozilla Thunderbird 140.1 (MFSA 2025-63) (bsc#1246664):\n\n- CVE-2025-8027: JavaScript engine only wrote partial return value to stack (bmo#1968423)\n- CVE-2025-8028: Large branch table could lead to truncated instruction (bmo#1971581)\n- CVE-2025-8029: javascript: URLs executed on object and embed tags (bmo#1928021)\n- CVE-2025-8036: DNS rebinding circumvents CORS (bmo#1960834)\n- CVE-2025-8037: Nameless cookies shadow secure cookies (bmo#1964767)\n- CVE-2025-8030: Potential user-assisted code execution in \u0027Copy as cURL\u0027 command (bmo#1968414)\n- CVE-2025-8031: Incorrect URL stripping in CSP reports (bmo#1971719)\n- CVE-2025-8032: XSLT documents could bypass CSP (bmo#1974407)\n- CVE-2025-8038: CSP frame-src was not correctly enforced for paths (bmo#1808979)\n- CVE-2025-8039: Search terms persisted in URL bar (bmo#1970997)\n- CVE-2025-8033: Incorrect JavaScript state machine for generators (bmo#1973990)\n- CVE-2025-8034: Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422)\n- CVE-2025-8040: Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998)\n- CVE-2025-8035: Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 (bmo#1975961, bmo#1975961, bmo#1975961)\n\nUpdate to Mozilla Thunderbird 140.0.1 (MFSA 2025-54) (bsc#1244670):\n\n- CVE-2025-6424: Use-after-free in FontFaceSet (bmo#1966423)\n- CVE-2025-6425: The WebCompat WebExtension shipped exposed a persistent UUID (bmo#1717672)\n- CVE-2025-6426: No warning when opening executable terminal files on macOS (bmo#1964385)\n- CVE-2025-6427: connect-src Content Security Policy restriction could be bypassed (bmo#1966927)\n- CVE-2025-6429: Incorrect parsing of URLs could have allowed embedding of youtube.com (bmo#1970658)\n- CVE-2025-6430: Content-Disposition header ignored when a file is included in an embed or object tag (bmo#1971140)\n- CVE-2025-6432: DNS Requests leaked outside of a configured SOCKS proxy (bmo#1943804)\n- CVE-2025-6433: WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate (bmo#1954033)\n- CVE-2025-6434: HTTPS-Only exception screen lacked anti-clickjacking delay (bmo#1955182)\n- CVE-2025-6435: Save as in Devtools could download files without sanitizing the extension (bmo#1950056, bmo#1961777)\n- CVE-2025-6436: Memory safety bugs fixed in Firefox 140 and Thunderbird 140 (bmo#1941377, bmo#1960948, bmo#1966187, bmo#1966505, bmo#1970764)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-2546,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-2546,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-2546,SUSE-SLE-Product-WE-15-SP6-2025-2546,SUSE-SLE-Product-WE-15-SP7-2025-2546,openSUSE-SLE-15.6-2025-2546",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_02546-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:02546-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502546-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:02546-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-July/040955.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1244670",
        "url": "https://bugzilla.suse.com/1244670"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1246664",
        "url": "https://bugzilla.suse.com/1246664"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-6424 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-6424/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-6425 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-6425/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-6426 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-6426/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-6427 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-6427/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-6429 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-6429/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-6430 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-6430/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-6432 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-6432/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-6433 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-6433/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-6434 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-6434/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-6435 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-6435/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-6436 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-6436/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8027 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8027/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8028 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8028/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8029 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8029/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8030 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8030/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8031 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8031/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8032 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8032/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8033 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8033/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8034 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8034/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8035 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8035/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8036 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8036/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8037 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8037/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8038 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8038/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8039 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8039/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8040 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8040/"
      }
    ],
    "title": "Security update for MozillaThunderbird",
    "tracking": {
      "current_release_date": "2025-07-30T07:34:22Z",
      "generator": {
        "date": "2025-07-30T07:34:22Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:02546-1",
      "initial_release_date": "2025-07-30T07:34:22Z",
      "revision_history": [
        {
          "date": "2025-07-30T07:34:22Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
                  "product_id": "MozillaThunderbird-140.1.0-150200.8.230.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
                  "product_id": "MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
                  "product_id": "MozillaThunderbird-140.1.0-150200.8.230.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
                  "product_id": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
                  "product_id": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
                  "product_id": "MozillaThunderbird-140.1.0-150200.8.230.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:15:sp7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.6",
                "product": {
                  "name": "openSUSE Leap 15.6",
                  "product_id": "openSUSE Leap 15.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.1.0-150200.8.230.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.1.0-150200.8.230.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x"
        },
        "product_reference": "MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.1.0-150200.8.230.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.1.0-150200.8.230.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x"
        },
        "product_reference": "MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.1.0-150200.8.230.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.1.0-150200.8.230.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.1.0-150200.8.230.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.1.0-150200.8.230.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x"
        },
        "product_reference": "MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.1.0-150200.8.230.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-6424",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-6424"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 115.25, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-6424",
          "url": "https://www.suse.com/security/cve/CVE-2025-6424"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244670 for CVE-2025-6424",
          "url": "https://bugzilla.suse.com/1244670"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-6424"
    },
    {
      "cve": "CVE-2025-6425",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-6425"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 115.25, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-6425",
          "url": "https://www.suse.com/security/cve/CVE-2025-6425"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244670 for CVE-2025-6425",
          "url": "https://bugzilla.suse.com/1244670"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-6425"
    },
    {
      "cve": "CVE-2025-6426",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-6426"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The executable file warning did not warn users before opening files with the `terminal` extension. \n*This bug only affects Firefox for macOS. Other versions of Firefox are unaffected.* This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-6426",
          "url": "https://www.suse.com/security/cve/CVE-2025-6426"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244670 for CVE-2025-6426",
          "url": "https://bugzilla.suse.com/1244670"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-6426"
    },
    {
      "cve": "CVE-2025-6427",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-6427"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-6427",
          "url": "https://www.suse.com/security/cve/CVE-2025-6427"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244670 for CVE-2025-6427",
          "url": "https://bugzilla.suse.com/1244670"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-6427"
    },
    {
      "cve": "CVE-2025-6429",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-6429"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-6429",
          "url": "https://www.suse.com/security/cve/CVE-2025-6429"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244670 for CVE-2025-6429",
          "url": "https://bugzilla.suse.com/1244670"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-6429"
    },
    {
      "cve": "CVE-2025-6430",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-6430"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `\u0026lt;embed\u0026gt;` or `\u0026lt;object\u0026gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-6430",
          "url": "https://www.suse.com/security/cve/CVE-2025-6430"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244670 for CVE-2025-6430",
          "url": "https://bugzilla.suse.com/1244670"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-6430"
    },
    {
      "cve": "CVE-2025-6432",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-6432"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-6432",
          "url": "https://www.suse.com/security/cve/CVE-2025-6432"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244670 for CVE-2025-6432",
          "url": "https://bugzilla.suse.com/1244670"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-6432"
    },
    {
      "cve": "CVE-2025-6433",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-6433"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete.  This is in violation of the WebAuthN spec which requires \"a secure transport established without errors\". This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-6433",
          "url": "https://www.suse.com/security/cve/CVE-2025-6433"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244670 for CVE-2025-6433",
          "url": "https://bugzilla.suse.com/1244670"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-6433"
    },
    {
      "cve": "CVE-2025-6434",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-6434"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-6434",
          "url": "https://www.suse.com/security/cve/CVE-2025-6434"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244670 for CVE-2025-6434",
          "url": "https://bugzilla.suse.com/1244670"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-6434"
    },
    {
      "cve": "CVE-2025-6435",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-6435"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-6435",
          "url": "https://www.suse.com/security/cve/CVE-2025-6435"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244670 for CVE-2025-6435",
          "url": "https://bugzilla.suse.com/1244670"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-6435"
    },
    {
      "cve": "CVE-2025-6436",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-6436"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-6436",
          "url": "https://www.suse.com/security/cve/CVE-2025-6436"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244670 for CVE-2025-6436",
          "url": "https://bugzilla.suse.com/1244670"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-6436"
    },
    {
      "cve": "CVE-2025-8027",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8027"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 115.26, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8027",
          "url": "https://www.suse.com/security/cve/CVE-2025-8027"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246664 for CVE-2025-8027",
          "url": "https://bugzilla.suse.com/1246664"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-8027"
    },
    {
      "cve": "CVE-2025-8028",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8028"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 115.26, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8028",
          "url": "https://www.suse.com/security/cve/CVE-2025-8028"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246664 for CVE-2025-8028",
          "url": "https://bugzilla.suse.com/1246664"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-8028"
    },
    {
      "cve": "CVE-2025-8029",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8029"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Firefox executed `javascript:` URLs when used in `object` and `embed` tags. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8029",
          "url": "https://www.suse.com/security/cve/CVE-2025-8029"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246664 for CVE-2025-8029",
          "url": "https://bugzilla.suse.com/1246664"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-8029"
    },
    {
      "cve": "CVE-2025-8030",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8030"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient escaping in the \"Copy as cURL\" feature could potentially be used to trick a user into executing unexpected code. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8030",
          "url": "https://www.suse.com/security/cve/CVE-2025-8030"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246664 for CVE-2025-8030",
          "url": "https://bugzilla.suse.com/1246664"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-8030"
    },
    {
      "cve": "CVE-2025-8031",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8031"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8031",
          "url": "https://www.suse.com/security/cve/CVE-2025-8031"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246664 for CVE-2025-8031",
          "url": "https://bugzilla.suse.com/1246664"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-8031"
    },
    {
      "cve": "CVE-2025-8032",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8032"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8032",
          "url": "https://www.suse.com/security/cve/CVE-2025-8032"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246664 for CVE-2025-8032",
          "url": "https://bugzilla.suse.com/1246664"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-8032"
    },
    {
      "cve": "CVE-2025-8033",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8033"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 115.26, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8033",
          "url": "https://www.suse.com/security/cve/CVE-2025-8033"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246664 for CVE-2025-8033",
          "url": "https://bugzilla.suse.com/1246664"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-8033"
    },
    {
      "cve": "CVE-2025-8034",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8034"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 115.26, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8034",
          "url": "https://www.suse.com/security/cve/CVE-2025-8034"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246664 for CVE-2025-8034",
          "url": "https://bugzilla.suse.com/1246664"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-8034"
    },
    {
      "cve": "CVE-2025-8035",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8035"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8035",
          "url": "https://www.suse.com/security/cve/CVE-2025-8035"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246664 for CVE-2025-8035",
          "url": "https://bugzilla.suse.com/1246664"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-8035"
    },
    {
      "cve": "CVE-2025-8036",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8036"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Firefox cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8036",
          "url": "https://www.suse.com/security/cve/CVE-2025-8036"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246664 for CVE-2025-8036",
          "url": "https://bugzilla.suse.com/1246664"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-8036"
    },
    {
      "cve": "CVE-2025-8037",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8037"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8037",
          "url": "https://www.suse.com/security/cve/CVE-2025-8037"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246664 for CVE-2025-8037",
          "url": "https://bugzilla.suse.com/1246664"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-8037"
    },
    {
      "cve": "CVE-2025-8038",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8038"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Firefox ignored paths when checking the validity of navigations in a frame. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8038",
          "url": "https://www.suse.com/security/cve/CVE-2025-8038"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246664 for CVE-2025-8038",
          "url": "https://bugzilla.suse.com/1246664"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-8038"
    },
    {
      "cve": "CVE-2025-8039",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8039"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8039",
          "url": "https://www.suse.com/security/cve/CVE-2025-8039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246664 for CVE-2025-8039",
          "url": "https://bugzilla.suse.com/1246664"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-8039"
    },
    {
      "cve": "CVE-2025-8040",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8040"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8040",
          "url": "https://www.suse.com/security/cve/CVE-2025-8040"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246664 for CVE-2025-8040",
          "url": "https://bugzilla.suse.com/1246664"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.1.0-150200.8.230.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.1.0-150200.8.230.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-30T07:34:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-8040"
    }
  ]
}

CVE-2025-6432 (GCVE-0-2025-6432)

Vulnerability from cvelistv5

Published

2025-06-24 12:28

Modified

2025-07-14 18:26

Severity ?

8.6 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

CWE

DNS Requests leaked outside of a configured SOCKS proxy

Summary

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox < 140 and Thunderbird < 140.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1943804
	https://www.mozilla.org/security/advisories/mfsa2025-51/
	https://www.mozilla.org/security/advisories/mfsa2025-54/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 140

Mozilla

Thunderbird

Version: unspecified < 140

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 8.6,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-6432",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-25T14:25:47.107539Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-25T14:26:02.827Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Albert"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140."
            }
          ],
          "value": "When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "DNS Requests leaked outside of a configured SOCKS proxy",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-14T18:26:53.167Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1943804"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-51/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-54/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-6432",
    "datePublished": "2025-06-24T12:28:03.769Z",
    "dateReserved": "2025-06-20T14:51:37.854Z",
    "dateUpdated": "2025-07-14T18:26:53.167Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-8033 (GCVE-0-2025-8033)

Vulnerability from cvelistv5

Published

2025-07-22 20:49

Modified

2025-07-23 13:39

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

Incorrect JavaScript state machine for generators

Summary

The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1973990
	https://www.mozilla.org/security/advisories/mfsa2025-56/
	https://www.mozilla.org/security/advisories/mfsa2025-57/
	https://www.mozilla.org/security/advisories/mfsa2025-58/
	https://www.mozilla.org/security/advisories/mfsa2025-59/
	https://www.mozilla.org/security/advisories/mfsa2025-61/
	https://www.mozilla.org/security/advisories/mfsa2025-62/
	https://www.mozilla.org/security/advisories/mfsa2025-63/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 141

Mozilla	Firefox ESR	Version: unspecified < 115.26
Mozilla	Firefox ESR	Version: unspecified < 128.13
Mozilla	Firefox ESR	Version: unspecified < 140.1
Mozilla	Thunderbird	Version: unspecified < 141
Mozilla	Thunderbird	Version: unspecified < 128.13
Mozilla	Thunderbird	Version: unspecified < 140.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-8033",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-23T13:36:06.360574Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-476",
                "description": "CWE-476 NULL Pointer Dereference",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-23T13:39:08.305Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.26",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Shaheen Fazim"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 115.26, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
            }
          ],
          "value": "The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 115.26, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Incorrect JavaScript state machine for generators",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-22T20:49:27.477Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1973990"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-57/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-8033",
    "datePublished": "2025-07-22T20:49:27.477Z",
    "dateReserved": "2025-07-22T10:13:59.291Z",
    "dateUpdated": "2025-07-23T13:39:08.305Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-6424 (GCVE-0-2025-6424)

Vulnerability from cvelistv5

Published

2025-06-24 12:27

Modified

2025-07-02 20:42

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Use-after-free in FontFaceSet

Summary

A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox < 140, Firefox ESR < 115.25, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1966423
	https://www.mozilla.org/security/advisories/mfsa2025-51/
	https://www.mozilla.org/security/advisories/mfsa2025-52/
	https://www.mozilla.org/security/advisories/mfsa2025-53/
	https://www.mozilla.org/security/advisories/mfsa2025-54/
	https://www.mozilla.org/security/advisories/mfsa2025-55/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 140

Mozilla	Firefox ESR	Version: unspecified < 115.25
Mozilla	Firefox ESR	Version: unspecified < 128.12
Mozilla	Thunderbird	Version: unspecified < 140
Mozilla	Thunderbird	Version: unspecified < 128.12

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-6424",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-25T12:36:06.501007Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-25T12:42:03.245Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.25",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "LJP and HexRabbit (DEVCORE Research Team)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 115.25, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12."
            }
          ],
          "value": "A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 115.25, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in FontFaceSet",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-02T20:42:37.048Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1966423"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-51/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-52/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-53/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-55/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-6424",
    "datePublished": "2025-06-24T12:27:59.669Z",
    "dateReserved": "2025-06-20T14:51:26.620Z",
    "dateUpdated": "2025-07-02T20:42:37.048Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-6430 (GCVE-0-2025-6430)

Vulnerability from cvelistv5

Published

2025-06-24 12:28

Modified

2025-07-14 18:26

Severity ?

6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

Content-Disposition header ignored when a file is included in an embed or object tag

Summary

When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1971140
	https://www.mozilla.org/security/advisories/mfsa2025-51/
	https://www.mozilla.org/security/advisories/mfsa2025-53/
	https://www.mozilla.org/security/advisories/mfsa2025-54/
	https://www.mozilla.org/security/advisories/mfsa2025-55/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 140

Mozilla	Firefox ESR	Version: unspecified < 128.12
Mozilla	Thunderbird	Version: unspecified < 140
Mozilla	Thunderbird	Version: unspecified < 128.12

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-6430",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-25T14:21:08.967871Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-25T14:28:07.992Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Daniil Satyaev (Positive Technologies)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "When a file download is specified via the \u003ccode\u003eContent-Disposition\u003c/code\u003e header, that directive would be ignored if the file was included via a \u003ccode\u003e\u0026lt;embed\u0026gt;\u003c/code\u003e or \u003ccode\u003e\u0026lt;object\u0026gt;\u003c/code\u003e tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12."
            }
          ],
          "value": "When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `\u0026lt;embed\u0026gt;` or `\u0026lt;object\u0026gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Content-Disposition header ignored when a file is included in an embed or object tag",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-14T18:26:52.696Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1971140"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-51/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-53/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-55/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-6430",
    "datePublished": "2025-06-24T12:28:01.020Z",
    "dateReserved": "2025-06-20T14:51:35.561Z",
    "dateUpdated": "2025-07-14T18:26:52.696Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-8036 (GCVE-0-2025-8036)

Vulnerability from cvelistv5

Published

2025-07-22 20:49

Modified

2025-07-31 15:57

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE

DNS rebinding circumvents CORS

Summary

Firefox cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1960834
	https://www.mozilla.org/security/advisories/mfsa2025-56/
	https://www.mozilla.org/security/advisories/mfsa2025-59/
	https://www.mozilla.org/security/advisories/mfsa2025-61/
	https://www.mozilla.org/security/advisories/mfsa2025-63/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 141

Mozilla	Firefox ESR	Version: unspecified < 140.1
Mozilla	Thunderbird	Version: unspecified < 141
Mozilla	Thunderbird	Version: unspecified < 140.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-8036",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-23T14:26:17.781838Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-350",
                "description": "CWE-350 Reliance on Reverse DNS Resolution for a Security-Critical Action",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-31T15:57:30.209Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Viktor Bocz"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Firefox cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1."
            }
          ],
          "value": "Firefox cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "DNS rebinding circumvents CORS",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-30T16:21:53.238Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1960834"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-8036",
    "datePublished": "2025-07-22T20:49:25.303Z",
    "dateReserved": "2025-07-22T10:14:02.586Z",
    "dateUpdated": "2025-07-31T15:57:30.209Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-8040 (GCVE-0-2025-8040)

Vulnerability from cvelistv5

Published

2025-07-22 20:49

Modified

2025-07-30 16:52

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141

Summary

Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1975058%2C1975998
	https://www.mozilla.org/security/advisories/mfsa2025-56/
	https://www.mozilla.org/security/advisories/mfsa2025-59/
	https://www.mozilla.org/security/advisories/mfsa2025-61/
	https://www.mozilla.org/security/advisories/mfsa2025-63/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 141

Mozilla	Firefox ESR	Version: unspecified < 140.1
Mozilla	Thunderbird	Version: unspecified < 141
Mozilla	Thunderbird	Version: unspecified < 140.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-8040",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-23T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-24T03:55:31.276Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Andrew McCreight, Ashley Zebrowski"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1."
            }
          ],
          "value": "Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-30T16:52:07.710Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1975058%2C1975998"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-8040",
    "datePublished": "2025-07-22T20:49:28.310Z",
    "dateReserved": "2025-07-22T10:14:10.587Z",
    "dateUpdated": "2025-07-30T16:52:07.710Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-6436 (GCVE-0-2025-6436)

Vulnerability from cvelistv5

Published

2025-06-24 12:28

Modified

2025-07-14 18:26

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Memory safety bugs fixed in Firefox 140 and Thunderbird 140

Summary

Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 140 and Thunderbird < 140.

References

►

URL

Tags

	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1941377%2C1960948%2C1966187%2C1966505%2C1970764
	https://www.mozilla.org/security/advisories/mfsa2025-51/
	https://www.mozilla.org/security/advisories/mfsa2025-54/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 140

Mozilla

Thunderbird

Version: unspecified < 140

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-6436",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-25T03:55:43.309265Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-26T13:27:34.979Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Andrew McCreight, Gabriele Svelto, Beth Rennie (she/her), the Mozilla Fuzzing Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140."
            }
          ],
          "value": "Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 140 and Thunderbird 140",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-14T18:26:54.057Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox 140 and Thunderbird 140",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1941377%2C1960948%2C1966187%2C1966505%2C1970764"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-51/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-54/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-6436",
    "datePublished": "2025-06-24T12:28:04.830Z",
    "dateReserved": "2025-06-20T14:51:44.671Z",
    "dateUpdated": "2025-07-14T18:26:54.057Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-8038 (GCVE-0-2025-8038)

Vulnerability from cvelistv5

Published

2025-07-22 20:49

Modified

2025-07-31 15:57

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CSP frame-src was not correctly enforced for paths

Summary

Firefox ignored paths when checking the validity of navigations in a frame. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1808979
	https://www.mozilla.org/security/advisories/mfsa2025-56/
	https://www.mozilla.org/security/advisories/mfsa2025-59/
	https://www.mozilla.org/security/advisories/mfsa2025-61/
	https://www.mozilla.org/security/advisories/mfsa2025-63/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 141

Mozilla	Firefox ESR	Version: unspecified < 140.1
Mozilla	Thunderbird	Version: unspecified < 141
Mozilla	Thunderbird	Version: unspecified < 140.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-8038",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-23T13:44:20.166233Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-345",
                "description": "CWE-345 Insufficient Verification of Data Authenticity",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-31T15:57:06.080Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Laurin Weger"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Firefox ignored paths when checking the validity of navigations in a frame. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1."
            }
          ],
          "value": "Firefox ignored paths when checking the validity of navigations in a frame. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CSP frame-src was not correctly enforced for paths",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-30T16:21:56.468Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1808979"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-8038",
    "datePublished": "2025-07-22T20:49:26.764Z",
    "dateReserved": "2025-07-22T10:14:06.430Z",
    "dateUpdated": "2025-07-31T15:57:06.080Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-8028 (GCVE-0-2025-8028)

Vulnerability from cvelistv5

Published

2025-07-22 20:49

Modified

2025-07-23 14:32

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Large branch table could lead to truncated instruction

Summary

On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1971581
	https://www.mozilla.org/security/advisories/mfsa2025-56/
	https://www.mozilla.org/security/advisories/mfsa2025-57/
	https://www.mozilla.org/security/advisories/mfsa2025-58/
	https://www.mozilla.org/security/advisories/mfsa2025-59/
	https://www.mozilla.org/security/advisories/mfsa2025-61/
	https://www.mozilla.org/security/advisories/mfsa2025-62/
	https://www.mozilla.org/security/advisories/mfsa2025-63/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 141

Mozilla	Firefox ESR	Version: unspecified < 115.26
Mozilla	Firefox ESR	Version: unspecified < 128.13
Mozilla	Firefox ESR	Version: unspecified < 140.1
Mozilla	Thunderbird	Version: unspecified < 141
Mozilla	Thunderbird	Version: unspecified < 128.13
Mozilla	Thunderbird	Version: unspecified < 140.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-8028",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-23T14:32:07.056857Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1332",
                "description": "CWE-1332 Improper Handling of Faults that Lead to Instruction Skips",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-23T14:32:58.701Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.26",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Gary Kwong"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "On arm64, a WASM \u003ccode\u003ebr_table\u003c/code\u003e instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 115.26, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
            }
          ],
          "value": "On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 115.26, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Large branch table could lead to truncated instruction",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-22T20:49:24.592Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1971581"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-57/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-8028",
    "datePublished": "2025-07-22T20:49:24.592Z",
    "dateReserved": "2025-07-22T10:13:49.236Z",
    "dateUpdated": "2025-07-23T14:32:58.701Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-8029 (GCVE-0-2025-8029)

Vulnerability from cvelistv5

Published

2025-07-22 20:49

Modified

2025-07-31 15:58

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE

javascript: URLs executed on object and embed tags

Summary

Firefox executed `javascript:` URLs when used in `object` and `embed` tags. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1928021
	https://www.mozilla.org/security/advisories/mfsa2025-56/
	https://www.mozilla.org/security/advisories/mfsa2025-58/
	https://www.mozilla.org/security/advisories/mfsa2025-59/
	https://www.mozilla.org/security/advisories/mfsa2025-61/
	https://www.mozilla.org/security/advisories/mfsa2025-62/
	https://www.mozilla.org/security/advisories/mfsa2025-63/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 141

Mozilla	Firefox ESR	Version: unspecified < 128.13
Mozilla	Firefox ESR	Version: unspecified < 140.1
Mozilla	Thunderbird	Version: unspecified < 141
Mozilla	Thunderbird	Version: unspecified < 128.13
Mozilla	Thunderbird	Version: unspecified < 140.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-8029",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-23T14:29:37.560314Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-80",
                "description": "CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-31T15:58:06.418Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Mirko Brodesser"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Firefox executed \u003ccode\u003ejavascript:\u003c/code\u003e URLs when used in \u003ccode\u003eobject\u003c/code\u003e and \u003ccode\u003eembed\u003c/code\u003e tags. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
            }
          ],
          "value": "Firefox executed `javascript:` URLs when used in `object` and `embed` tags. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "javascript: URLs executed on object and embed tags",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-30T16:21:52.107Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1928021"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-8029",
    "datePublished": "2025-07-22T20:49:24.898Z",
    "dateReserved": "2025-07-22T10:13:51.239Z",
    "dateUpdated": "2025-07-31T15:58:06.418Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-8035 (GCVE-0-2025-8035)

Vulnerability from cvelistv5

Published

2025-07-22 20:49

Modified

2025-07-30 16:52

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141

Summary

Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1975961
	https://www.mozilla.org/security/advisories/mfsa2025-56/
	https://www.mozilla.org/security/advisories/mfsa2025-58/
	https://www.mozilla.org/security/advisories/mfsa2025-59/
	https://www.mozilla.org/security/advisories/mfsa2025-61/
	https://www.mozilla.org/security/advisories/mfsa2025-62/
	https://www.mozilla.org/security/advisories/mfsa2025-63/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 141

Mozilla	Firefox ESR	Version: unspecified < 128.13
Mozilla	Firefox ESR	Version: unspecified < 140.1
Mozilla	Thunderbird	Version: unspecified < 141
Mozilla	Thunderbird	Version: unspecified < 128.13
Mozilla	Thunderbird	Version: unspecified < 140.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-8035",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-23T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-24T03:55:32.645Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "the Mozilla Fuzzing Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
            }
          ],
          "value": "Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-30T16:52:08.908Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1975961"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-8035",
    "datePublished": "2025-07-22T20:49:28.660Z",
    "dateReserved": "2025-07-22T10:14:02.025Z",
    "dateUpdated": "2025-07-30T16:52:08.908Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-8037 (GCVE-0-2025-8037)

Vulnerability from cvelistv5

Published

2025-07-22 20:49

Modified

2025-07-23 14:25

Severity ?

9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE

Nameless cookies shadow secure cookies

Summary

Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1964767
	https://www.mozilla.org/security/advisories/mfsa2025-56/
	https://www.mozilla.org/security/advisories/mfsa2025-59/
	https://www.mozilla.org/security/advisories/mfsa2025-61/
	https://www.mozilla.org/security/advisories/mfsa2025-63/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 141

Mozilla	Firefox ESR	Version: unspecified < 140.1
Mozilla	Thunderbird	Version: unspecified < 141
Mozilla	Thunderbird	Version: unspecified < 140.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-8037",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-23T14:22:54.948290Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-614",
                "description": "CWE-614 Sensitive Cookie in HTTPS Session Without \u0027Secure\u0027 Attribute",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-23T14:25:27.565Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Uku S\u00f5rmus"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the \u003ccode\u003eSecure\u003c/code\u003e attribute. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1."
            }
          ],
          "value": "Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Nameless cookies shadow secure cookies",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-22T20:49:25.621Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1964767"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-8037",
    "datePublished": "2025-07-22T20:49:25.621Z",
    "dateReserved": "2025-07-22T10:14:04.585Z",
    "dateUpdated": "2025-07-23T14:25:27.565Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-8030 (GCVE-0-2025-8030)

Vulnerability from cvelistv5

Published

2025-07-22 20:49

Modified

2025-07-24 03:55

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE

Potential user-assisted code execution in “Copy as cURL” command

Summary

Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected code. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1968414
	https://www.mozilla.org/security/advisories/mfsa2025-56/
	https://www.mozilla.org/security/advisories/mfsa2025-58/
	https://www.mozilla.org/security/advisories/mfsa2025-59/
	https://www.mozilla.org/security/advisories/mfsa2025-61/
	https://www.mozilla.org/security/advisories/mfsa2025-62/
	https://www.mozilla.org/security/advisories/mfsa2025-63/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 141

Mozilla	Firefox ESR	Version: unspecified < 128.13
Mozilla	Firefox ESR	Version: unspecified < 140.1
Mozilla	Thunderbird	Version: unspecified < 141
Mozilla	Thunderbird	Version: unspecified < 128.13
Mozilla	Thunderbird	Version: unspecified < 140.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-8030",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-23T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-24T03:55:28.704Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ameen Basha M K"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Insufficient escaping in the \u201cCopy as cURL\u201d feature could potentially be used to trick a user into executing unexpected code. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
            }
          ],
          "value": "Insufficient escaping in the \u201cCopy as cURL\u201d feature could potentially be used to trick a user into executing unexpected code. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Potential user-assisted code execution in \u201cCopy as cURL\u201d command",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-22T20:49:25.931Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1968414"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-8030",
    "datePublished": "2025-07-22T20:49:25.931Z",
    "dateReserved": "2025-07-22T10:13:53.205Z",
    "dateUpdated": "2025-07-24T03:55:28.704Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-6435 (GCVE-0-2025-6435)

Vulnerability from cvelistv5

Published

2025-06-24 12:28

Modified

2025-07-14 18:26

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Save as in Devtools could download files without sanitizing the extension

Summary

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability affects Firefox < 140 and Thunderbird < 140.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1950056
	https://bugzilla.mozilla.org/show_bug.cgi?id=1961777
	https://www.mozilla.org/security/advisories/mfsa2025-51/
	https://www.mozilla.org/security/advisories/mfsa2025-54/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 140

Mozilla

Thunderbird

Version: unspecified < 140

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-6435",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-24T13:37:09.229042Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-434",
                "description": "CWE-434 Unrestricted Upload of File with Dangerous Type",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-24T13:40:15.391Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ameen Basha M K"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the \u003ccode\u003e.download\u003c/code\u003e file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140."
            }
          ],
          "value": "If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Save as in Devtools could download files without sanitizing the extension",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-14T18:26:53.836Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1950056"
        },
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1961777"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-51/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-54/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-6435",
    "datePublished": "2025-06-24T12:28:04.603Z",
    "dateReserved": "2025-06-20T14:51:42.561Z",
    "dateUpdated": "2025-07-14T18:26:53.836Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-6427 (GCVE-0-2025-6427)

Vulnerability from cvelistv5

Published

2025-06-24 12:28

Modified

2025-07-14 18:26

Severity ?

9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE

connect-src Content Security Policy restriction could be bypassed

Summary

An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability affects Firefox < 140 and Thunderbird < 140.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1966927
	https://www.mozilla.org/security/advisories/mfsa2025-51/
	https://www.mozilla.org/security/advisories/mfsa2025-54/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 140

Mozilla

Thunderbird

Version: unspecified < 140

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-6427",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-25T14:20:57.559919Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-693",
                "description": "CWE-693 Protection Mechanism Failure",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-25T14:27:22.224Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Alan Li (lebr0nli)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An attacker was able to bypass the \u003ccode\u003econnect-src\u003c/code\u003e directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140."
            }
          ],
          "value": "An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "connect-src Content Security Policy restriction could be bypassed",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-14T18:26:51.978Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1966927"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-51/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-54/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-6427",
    "datePublished": "2025-06-24T12:28:01.317Z",
    "dateReserved": "2025-06-20T14:51:31.244Z",
    "dateUpdated": "2025-07-14T18:26:51.978Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-6426 (GCVE-0-2025-6426)

Vulnerability from cvelistv5

Published

2025-06-24 12:28

Modified

2025-07-14 18:26

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

No warning when opening executable terminal files on macOS

Summary

The executable file warning did not warn users before opening files with the `terminal` extension. *This bug only affects Firefox for macOS. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1964385
	https://www.mozilla.org/security/advisories/mfsa2025-51/
	https://www.mozilla.org/security/advisories/mfsa2025-53/
	https://www.mozilla.org/security/advisories/mfsa2025-54/
	https://www.mozilla.org/security/advisories/mfsa2025-55/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 140

Mozilla	Firefox ESR	Version: unspecified < 128.12
Mozilla	Thunderbird	Version: unspecified < 140
Mozilla	Thunderbird	Version: unspecified < 128.12

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-6426",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-25T14:21:30.828136Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-345",
                "description": "CWE-345 Insufficient Verification of Data Authenticity",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-25T14:30:17.128Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "pwn2car"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The executable file warning did not warn users before opening files with the \u003ccode\u003eterminal\u003c/code\u003e extension. \u003cbr\u003e*This bug only affects Firefox for macOS. Other versions of Firefox are unaffected.* This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12."
            }
          ],
          "value": "The executable file warning did not warn users before opening files with the `terminal` extension. \n*This bug only affects Firefox for macOS. Other versions of Firefox are unaffected.* This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "No warning when opening executable terminal files on macOS",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-14T18:26:51.567Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1964385"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-51/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-53/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-55/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-6426",
    "datePublished": "2025-06-24T12:28:00.614Z",
    "dateReserved": "2025-06-20T14:51:29.856Z",
    "dateUpdated": "2025-07-14T18:26:51.567Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-6425 (GCVE-0-2025-6425)

Vulnerability from cvelistv5

Published

2025-06-24 12:27

Modified

2025-07-03 18:53

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE

The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

Summary

An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox < 140, Firefox ESR < 115.25, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1717672
	https://www.mozilla.org/security/advisories/mfsa2025-51/
	https://www.mozilla.org/security/advisories/mfsa2025-52/
	https://www.mozilla.org/security/advisories/mfsa2025-53/
	https://www.mozilla.org/security/advisories/mfsa2025-54/
	https://www.mozilla.org/security/advisories/mfsa2025-55/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 140

Mozilla	Firefox ESR	Version: unspecified < 115.25
Mozilla	Firefox ESR	Version: unspecified < 128.12
Mozilla	Thunderbird	Version: unspecified < 140
Mozilla	Thunderbird	Version: unspecified < 128.12

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-6425",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-25T14:21:41.910497Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-25T14:30:48.734Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.25",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Rob Wu"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 115.25, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12."
            }
          ],
          "value": "An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 115.25, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "The WebCompat WebExtension shipped with Firefox exposed a persistent UUID",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-03T18:53:52.156Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1717672"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-51/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-52/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-53/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-55/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-6425",
    "datePublished": "2025-06-24T12:27:59.987Z",
    "dateReserved": "2025-06-20T14:51:28.050Z",
    "dateUpdated": "2025-07-03T18:53:52.156Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-8039 (GCVE-0-2025-8039)

Vulnerability from cvelistv5

Published

2025-07-22 20:49

Modified

2025-07-23 13:43

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE

Search terms persisted in URL bar

Summary

In some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1970997
	https://www.mozilla.org/security/advisories/mfsa2025-56/
	https://www.mozilla.org/security/advisories/mfsa2025-59/
	https://www.mozilla.org/security/advisories/mfsa2025-61/
	https://www.mozilla.org/security/advisories/mfsa2025-63/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 141

Mozilla	Firefox ESR	Version: unspecified < 140.1
Mozilla	Thunderbird	Version: unspecified < 141
Mozilla	Thunderbird	Version: unspecified < 140.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-8039",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-23T13:39:50.384748Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-23T13:43:31.976Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "S\u00f6ren Hentzschel"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1."
            }
          ],
          "value": "In some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, and Thunderbird \u003c 140.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Search terms persisted in URL bar",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-22T20:49:27.191Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970997"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-8039",
    "datePublished": "2025-07-22T20:49:27.191Z",
    "dateReserved": "2025-07-22T10:14:08.352Z",
    "dateUpdated": "2025-07-23T13:43:31.976Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-6429 (GCVE-0-2025-6429)

Vulnerability from cvelistv5

Published

2025-06-24 12:28

Modified

2025-07-14 18:26

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE

Incorrect parsing of URLs could have allowed embedding of youtube.com

Summary

Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1970658
	https://www.mozilla.org/security/advisories/mfsa2025-51/
	https://www.mozilla.org/security/advisories/mfsa2025-53/
	https://www.mozilla.org/security/advisories/mfsa2025-54/
	https://www.mozilla.org/security/advisories/mfsa2025-55/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 140

Mozilla	Firefox ESR	Version: unspecified < 128.12
Mozilla	Thunderbird	Version: unspecified < 140
Mozilla	Thunderbird	Version: unspecified < 128.12

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-6429",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-25T14:21:21.354270Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-116",
                "description": "CWE-116 Improper Encoding or Escaping of Output",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-25T14:28:51.535Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Masato Kinugawa"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an \u003ccode\u003eembed\u003c/code\u003e tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12."
            }
          ],
          "value": "Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.  This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox \u003c 140, Firefox ESR \u003c 128.12, Thunderbird \u003c 140, and Thunderbird \u003c 128.12."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Incorrect parsing of URLs could have allowed embedding of youtube.com",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-14T18:26:52.236Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970658"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-51/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-53/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-55/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-6429",
    "datePublished": "2025-06-24T12:28:00.819Z",
    "dateReserved": "2025-06-20T14:51:34.184Z",
    "dateUpdated": "2025-07-14T18:26:52.236Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-8034 (GCVE-0-2025-8034)

Vulnerability from cvelistv5

Published

2025-07-22 20:49

Modified

2025-07-31 14:07

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141

Summary

Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1970422
	https://www.mozilla.org/security/advisories/mfsa2025-56/
	https://www.mozilla.org/security/advisories/mfsa2025-57/
	https://www.mozilla.org/security/advisories/mfsa2025-58/
	https://www.mozilla.org/security/advisories/mfsa2025-59/
	https://www.mozilla.org/security/advisories/mfsa2025-61/
	https://www.mozilla.org/security/advisories/mfsa2025-62/
	https://www.mozilla.org/security/advisories/mfsa2025-63/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 141

Mozilla	Firefox ESR	Version: unspecified < 115.26
Mozilla	Firefox ESR	Version: unspecified < 128.13
Mozilla	Firefox ESR	Version: unspecified < 140.1
Mozilla	Thunderbird	Version: unspecified < 141
Mozilla	Thunderbird	Version: unspecified < 128.13
Mozilla	Thunderbird	Version: unspecified < 140.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-8034",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-24T03:55:30.954852Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-31T14:07:04.918Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.26",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "the Mozilla Fuzzing Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 115.26, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
            }
          ],
          "value": "Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 115.26, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-30T16:52:06.877Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970422"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-57/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-8034",
    "datePublished": "2025-07-22T20:49:27.749Z",
    "dateReserved": "2025-07-22T10:14:01.438Z",
    "dateUpdated": "2025-07-31T14:07:04.918Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-6433 (GCVE-0-2025-6433)

Vulnerability from cvelistv5

Published

2025-06-24 12:28

Modified

2025-07-14 18:26

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate

Summary

If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This vulnerability affects Firefox < 140 and Thunderbird < 140.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1954033
	https://www.mozilla.org/security/advisories/mfsa2025-51/
	https://www.mozilla.org/security/advisories/mfsa2025-54/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 140

Mozilla

Thunderbird

Version: unspecified < 140

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-6433",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-25T12:31:56.389041Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-295",
                "description": "CWE-295 Improper Certificate Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-25T12:41:50.340Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Simon"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete.  This is in violation of the WebAuthN spec which requires \"a secure transport established without errors\". This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140."
            }
          ],
          "value": "If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete.  This is in violation of the WebAuthN spec which requires \"a secure transport established without errors\". This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-14T18:26:53.393Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1954033"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-51/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-54/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-6433",
    "datePublished": "2025-06-24T12:28:04.065Z",
    "dateReserved": "2025-06-20T14:51:39.059Z",
    "dateUpdated": "2025-07-14T18:26:53.393Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-8031 (GCVE-0-2025-8031)

Vulnerability from cvelistv5

Published

2025-07-22 20:49

Modified

2025-07-23 14:00

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Incorrect URL stripping in CSP reports

Summary

The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1971719
	https://www.mozilla.org/security/advisories/mfsa2025-56/
	https://www.mozilla.org/security/advisories/mfsa2025-58/
	https://www.mozilla.org/security/advisories/mfsa2025-59/
	https://www.mozilla.org/security/advisories/mfsa2025-61/
	https://www.mozilla.org/security/advisories/mfsa2025-62/
	https://www.mozilla.org/security/advisories/mfsa2025-63/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 141

Mozilla	Firefox ESR	Version: unspecified < 128.13
Mozilla	Firefox ESR	Version: unspecified < 140.1
Mozilla	Thunderbird	Version: unspecified < 141
Mozilla	Thunderbird	Version: unspecified < 128.13
Mozilla	Thunderbird	Version: unspecified < 140.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-8031",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-23T13:56:53.422028Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-23T14:00:29.698Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Tom Schuster"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The \u003ccode\u003eusername:password\u003c/code\u003e part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
            }
          ],
          "value": "The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Incorrect URL stripping in CSP reports",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-22T20:49:26.243Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1971719"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-8031",
    "datePublished": "2025-07-22T20:49:26.243Z",
    "dateReserved": "2025-07-22T10:13:55.392Z",
    "dateUpdated": "2025-07-23T14:00:29.698Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-6434 (GCVE-0-2025-6434)

Vulnerability from cvelistv5

Published

2025-06-24 12:28

Modified

2025-07-14 18:26

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CWE

HTTPS-Only exception screen lacked anti-clickjacking delay

Summary

The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox < 140 and Thunderbird < 140.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1955182
	https://www.mozilla.org/security/advisories/mfsa2025-51/
	https://www.mozilla.org/security/advisories/mfsa2025-54/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 140

Mozilla

Thunderbird

Version: unspecified < 140

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-6434",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-25T14:20:21.535910Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1021",
                "description": "CWE-1021 Improper Restriction of Rendered UI Layers or Frames",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-25T14:23:05.002Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "hafiizh \u0026 kang ali"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140."
            }
          ],
          "value": "The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox \u003c 140 and Thunderbird \u003c 140."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "HTTPS-Only exception screen lacked anti-clickjacking delay",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-14T18:26:53.605Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1955182"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-51/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-54/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-6434",
    "datePublished": "2025-06-24T12:28:04.375Z",
    "dateReserved": "2025-06-20T14:51:40.757Z",
    "dateUpdated": "2025-07-14T18:26:53.605Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-8032 (GCVE-0-2025-8032)

Vulnerability from cvelistv5

Published

2025-07-22 20:49

Modified

2025-07-23 13:56

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE

XSLT documents could bypass CSP

Summary

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1974407
	https://www.mozilla.org/security/advisories/mfsa2025-56/
	https://www.mozilla.org/security/advisories/mfsa2025-58/
	https://www.mozilla.org/security/advisories/mfsa2025-59/
	https://www.mozilla.org/security/advisories/mfsa2025-61/
	https://www.mozilla.org/security/advisories/mfsa2025-62/
	https://www.mozilla.org/security/advisories/mfsa2025-63/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 141

Mozilla	Firefox ESR	Version: unspecified < 128.13
Mozilla	Firefox ESR	Version: unspecified < 140.1
Mozilla	Thunderbird	Version: unspecified < 141
Mozilla	Thunderbird	Version: unspecified < 128.13
Mozilla	Thunderbird	Version: unspecified < 140.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-8032",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-23T13:55:17.746727Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-693",
                "description": "CWE-693 Protection Mechanism Failure",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-23T13:56:15.096Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Joe Turki"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
            }
          ],
          "value": "XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "XSLT documents could bypass CSP",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-22T20:49:26.507Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1974407"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-8032",
    "datePublished": "2025-07-22T20:49:26.507Z",
    "dateReserved": "2025-07-22T10:13:57.272Z",
    "dateUpdated": "2025-07-23T13:56:15.096Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-8027 (GCVE-0-2025-8027)

Vulnerability from cvelistv5

Published

2025-07-22 20:49

Modified

2025-07-23 13:46

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

JavaScript engine only wrote partial return value to stack

Summary

On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1968423
	https://www.mozilla.org/security/advisories/mfsa2025-56/
	https://www.mozilla.org/security/advisories/mfsa2025-57/
	https://www.mozilla.org/security/advisories/mfsa2025-58/
	https://www.mozilla.org/security/advisories/mfsa2025-59/
	https://www.mozilla.org/security/advisories/mfsa2025-61/
	https://www.mozilla.org/security/advisories/mfsa2025-62/
	https://www.mozilla.org/security/advisories/mfsa2025-63/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 141

Mozilla	Firefox ESR	Version: unspecified < 115.26
Mozilla	Firefox ESR	Version: unspecified < 128.13
Mozilla	Firefox ESR	Version: unspecified < 140.1
Mozilla	Thunderbird	Version: unspecified < 141
Mozilla	Thunderbird	Version: unspecified < 128.13
Mozilla	Thunderbird	Version: unspecified < 140.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-8027",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-23T13:42:23.408460Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-457",
                "description": "CWE-457 Use of Uninitialized Variable",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-23T13:46:28.122Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.26",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "141",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Nan Wang"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 115.26, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
            }
          ],
          "value": "On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerability affects Firefox \u003c 141, Firefox ESR \u003c 115.26, Firefox ESR \u003c 128.13, Firefox ESR \u003c 140.1, Thunderbird \u003c 141, Thunderbird \u003c 128.13, and Thunderbird \u003c 140.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "JavaScript engine only wrote partial return value to stack",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-22T20:49:24.039Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1968423"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-57/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-8027",
    "datePublished": "2025-07-22T20:49:24.039Z",
    "dateReserved": "2025-07-22T10:13:47.266Z",
    "dateUpdated": "2025-07-23T13:46:28.122Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2025:02546-1

Vulnerability from csaf_suse

CVE-2025-6432 (GCVE-0-2025-6432)

Vulnerability from cvelistv5

CVE-2025-8033 (GCVE-0-2025-8033)

Vulnerability from cvelistv5

CVE-2025-6424 (GCVE-0-2025-6424)

Vulnerability from cvelistv5

CVE-2025-6430 (GCVE-0-2025-6430)

Vulnerability from cvelistv5

CVE-2025-8036 (GCVE-0-2025-8036)

Vulnerability from cvelistv5

CVE-2025-8040 (GCVE-0-2025-8040)

Vulnerability from cvelistv5

CVE-2025-6436 (GCVE-0-2025-6436)

Vulnerability from cvelistv5

CVE-2025-8038 (GCVE-0-2025-8038)

Vulnerability from cvelistv5

CVE-2025-8028 (GCVE-0-2025-8028)

Vulnerability from cvelistv5

CVE-2025-8029 (GCVE-0-2025-8029)

Vulnerability from cvelistv5

CVE-2025-8035 (GCVE-0-2025-8035)

Vulnerability from cvelistv5

CVE-2025-8037 (GCVE-0-2025-8037)

Vulnerability from cvelistv5

CVE-2025-8030 (GCVE-0-2025-8030)

Vulnerability from cvelistv5

CVE-2025-6435 (GCVE-0-2025-6435)

Vulnerability from cvelistv5

CVE-2025-6427 (GCVE-0-2025-6427)

Vulnerability from cvelistv5

CVE-2025-6426 (GCVE-0-2025-6426)

Vulnerability from cvelistv5

CVE-2025-6425 (GCVE-0-2025-6425)

Vulnerability from cvelistv5

CVE-2025-8039 (GCVE-0-2025-8039)

Vulnerability from cvelistv5

CVE-2025-6429 (GCVE-0-2025-6429)

Vulnerability from cvelistv5

CVE-2025-8034 (GCVE-0-2025-8034)

Vulnerability from cvelistv5

CVE-2025-6433 (GCVE-0-2025-6433)

Vulnerability from cvelistv5

CVE-2025-8031 (GCVE-0-2025-8031)

Vulnerability from cvelistv5

CVE-2025-6434 (GCVE-0-2025-6434)

Vulnerability from cvelistv5

CVE-2025-8032 (GCVE-0-2025-8032)

Vulnerability from cvelistv5

CVE-2025-8027 (GCVE-0-2025-8027)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature