Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/firefox-esr@140.9.0esr-1~deb13u1
purl pkg:deb/debian/firefox-esr@140.9.0esr-1~deb13u1
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.4
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-5dw5-vpt8-zqbz
Aliases:
CVE-2026-5731
Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
140.9.1esr-1~deb13u1
Affected by 0 other vulnerabilities.
140.9.1esr-1
Affected by 1 other vulnerability.
VCID-9ag7-z86d-nba9
Aliases:
CVE-2026-5734
Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
140.9.1esr-1~deb13u1
Affected by 0 other vulnerabilities.
140.9.1esr-1
Affected by 1 other vulnerability.
VCID-qbzp-euvv-q7c7
Aliases:
CVE-2026-5732
140.9.1esr-1~deb13u1
Affected by 0 other vulnerabilities.
140.9.1esr-1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T01:18:15.471816+00:00 Debian Oval Importer Affected by VCID-qbzp-euvv-q7c7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T01:17:41.243455+00:00 Debian Oval Importer Affected by VCID-9ag7-z86d-nba9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T01:17:40.492621+00:00 Debian Oval Importer Affected by VCID-5dw5-vpt8-zqbz https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-13T10:15:40.912145+00:00 Debian Oval Importer Affected by VCID-qbzp-euvv-q7c7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-13T10:15:06.857568+00:00 Debian Oval Importer Affected by VCID-9ag7-z86d-nba9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-13T10:15:06.072503+00:00 Debian Oval Importer Affected by VCID-5dw5-vpt8-zqbz https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0