Debian/firefox-esr: high 7.1
Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Action: Upgrade firefox-esr to 153.5.0esr-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 153.5.0esr-1 | - |
Fixed versions
| 153.5.0esr-1 |
Sources
- osv: DEBIAN-CVE-2026-109712#Debian:14/firefox-esr
- https://security-tracker.debian.org/tracker/CVE-2026-109712
published · modified · JSON