Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/firefox-esr@140.9.1esr-1~deb13u1
purl pkg:deb/debian/firefox-esr@140.9.1esr-1~deb13u1
Tags Ghost
Next non-vulnerable version 140.10.1esr-1~deb12u1
Latest non-vulnerable version 140.10.1esr-1~deb12u1
Risk 4.4
Vulnerabilities affecting this package (24)
Vulnerability Summary Fixed by
VCID-2fqb-r5zb-a7dp
Aliases:
CVE-2026-6748
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-3kv6-c148-nkhq
Aliases:
CVE-2026-6765
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-59d3-343b-e3aw
Aliases:
CVE-2026-6770
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-61r1-arbe-dke4
Aliases:
CVE-2026-6761
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-7jt2-zr49-7ye5
Aliases:
CVE-2026-6766
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-95et-ezmb-buau
Aliases:
CVE-2026-6751
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-9nbw-7c9e-13af
Aliases:
CVE-2026-6763
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-av7u-3g4m-mugm
Aliases:
CVE-2026-6762
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-bwth-uepr-z7a3
Aliases:
CVE-2026-6750
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-cjsm-7gxr-8ygw
Aliases:
CVE-2026-6746
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-d16s-p141-qbft
Aliases:
CVE-2026-6752
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-fxjm-ywug-f3d5
Aliases:
CVE-2026-6767
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-hk2m-rbdy-nqhc
Aliases:
CVE-2026-6772
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-ma29-qa7e-9qb4
Aliases:
CVE-2026-6764
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-nge1-4cvg-zqb2
Aliases:
CVE-2026-6769
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-nyum-jpbc-abew
Aliases:
CVE-2026-6776
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-p6yz-xs58-u3gm
Aliases:
CVE-2026-6786
Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-pfmd-zv8f-8bfc
Aliases:
CVE-2026-6785
Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-q689-wneh-hbdq
Aliases:
CVE-2026-6757
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-q8qp-5szp-mfe8
Aliases:
CVE-2026-6749
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-ruqn-mk9t-57hb
Aliases:
CVE-2026-6753
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-tv7r-qf2c-dqbm
Aliases:
CVE-2026-6771
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-w98r-yagc-kkec
Aliases:
CVE-2026-6754
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
VCID-z6tm-b352-5uhk
Aliases:
CVE-2026-6747
140.10.0esr-1~deb12u1
Affected by 4 other vulnerabilities.
140.10.0esr-1
Affected by 5 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-26T15:58:52.421091+00:00 Debian Oval Importer Affected by VCID-pfmd-zv8f-8bfc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:58:49.003980+00:00 Debian Oval Importer Affected by VCID-d16s-p141-qbft https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:58:43.370673+00:00 Debian Oval Importer Affected by VCID-fxjm-ywug-f3d5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:58:41.901492+00:00 Debian Oval Importer Affected by VCID-cjsm-7gxr-8ygw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:58:27.352185+00:00 Debian Oval Importer Affected by VCID-av7u-3g4m-mugm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:58:17.167915+00:00 Debian Oval Importer Affected by VCID-bwth-uepr-z7a3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:58:06.583346+00:00 Debian Oval Importer Affected by VCID-ruqn-mk9t-57hb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:58:04.451306+00:00 Debian Oval Importer Affected by VCID-3kv6-c148-nkhq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:57:54.488272+00:00 Debian Oval Importer Affected by VCID-59d3-343b-e3aw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:57:38.209903+00:00 Debian Oval Importer Affected by VCID-q689-wneh-hbdq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:57:36.778879+00:00 Debian Oval Importer Affected by VCID-9nbw-7c9e-13af https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:57:35.353252+00:00 Debian Oval Importer Affected by VCID-2fqb-r5zb-a7dp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:57:32.527665+00:00 Debian Oval Importer Affected by VCID-p6yz-xs58-u3gm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:57:23.066993+00:00 Debian Oval Importer Affected by VCID-tv7r-qf2c-dqbm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:57:17.010896+00:00 Debian Oval Importer Affected by VCID-7jt2-zr49-7ye5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:57:11.717129+00:00 Debian Oval Importer Affected by VCID-nyum-jpbc-abew https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:57:08.893045+00:00 Debian Oval Importer Affected by VCID-w98r-yagc-kkec https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:57:04.074984+00:00 Debian Oval Importer Affected by VCID-61r1-arbe-dke4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:56:57.318968+00:00 Debian Oval Importer Affected by VCID-ma29-qa7e-9qb4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:56:55.960784+00:00 Debian Oval Importer Affected by VCID-hk2m-rbdy-nqhc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:56:55.225295+00:00 Debian Oval Importer Affected by VCID-z6tm-b352-5uhk https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:56:53.842606+00:00 Debian Oval Importer Affected by VCID-95et-ezmb-buau https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:56:53.016715+00:00 Debian Oval Importer Affected by VCID-q8qp-5szp-mfe8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-26T15:56:45.971167+00:00 Debian Oval Importer Affected by VCID-nge1-4cvg-zqb2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-21T08:35:34.545386+00:00 Debian Oval Importer Fixing VCID-qbzp-euvv-q7c7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-21T08:35:00.706457+00:00 Debian Oval Importer Fixing VCID-9ag7-z86d-nba9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-21T08:34:59.917901+00:00 Debian Oval Importer Fixing VCID-5dw5-vpt8-zqbz https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0