VDB
GCVE-110-MAGEIA-2026-242
GCVE-110-MAGEIA-2026-242
Advisory Published
The updated packages fix security vulnerabilities:
Privilege escalation in the Graphics: WebRender component.
(CVE-2026-12289)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12290)
Use-after-free in the Networking: HTTP component. (CVE-2026-12291)
Incorrect boundary conditions in the Web Audio component.
(CVE-2026-12292)
Sandbox escape in the DOM: Workers component. (CVE-2026-12294)
Sandbox escape in the DOM: Navigation component. (CVE-2026-12295)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12298)
Sandbox escape in the Security: Process Sandboxing component.
(CVE-2026-12296)
Sandbox escape due to incorrect boundary conditions in the Networking
component. (CVE-2026-12297)
JIT miscompilation in the DOM: Core & HTML component. (CVE-2026-12299)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12329)
Mitigation bypass in the DOM: Security component. (CVE-2026-12302)
Same-origin policy bypass in the Networking: Cookies component.
(CVE-2026-12304)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12305)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12306)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12307)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12308)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12309)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12310)
Information disclosure, sandbox escape in the Security: Process
Sandboxing component. (CVE-2026-12311)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12312)
Information disclosure, sandbox escape in the Security: Process
Sandboxing component. (CVE-2026-12313)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12314)
Mitigation bypass in the DOM: Security component. (CVE-2026-12315)
Incorrect boundary conditions in the Internationalization component.
(CVE-2026-12330)
Incorrect boundary conditions in the Graphics: CanvasWebGL component.
(CVE-2026-12324)
Denial-of-service in the Graphics: ImageLib component. (CVE-2026-12325)
Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12,
Firefox 152 and Thunderbird 152. (CVE-2026-12327)
Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12,
Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152.
(CVE-2026-12328)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | firefox | 0 (affected), 140.12.0-1.mga9 (unaffected) | — |
| Mageia | firefox-l10n | 0 (affected), 140.12.0-1.mga9 (unaffected) | — |
| Mageia | rootcerts | 0 (affected), 20260611.00-1.mga9 (unaffected) | — |
| Mageia | nss | 0 (affected), 3.125.0-1.mga9 (unaffected) | — |
| Mageia | nss | 0 (affected), 3.125.0-1.mga10 (unaffected) | — |
| Mageia | rootcerts | 0 (affected), 20260611.00-1.mga10 (unaffected) | — |
| Mageia | firefox | 0 (affected), 140.12.0-1.mga10 (unaffected) | — |
| Mageia | firefox-l10n | 0 (affected), 140.12.0-1.mga10 (unaffected) | — |
References
Browse GCVE Records
67,517 records in the GCVE database · Updated August 11, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.