Debian/firefox-esr: unknown

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Action: Upgrade firefox-esr to 153.6.0esr-1~deb12u2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2026-117983
• https://security-tracker.debian.org/tracker/CVE-2026-117983

published 2026-10-27T14:16:56.237Z · modified 2026-10-29T12:00:18.323780841Z · JSON