MGASA-2026-0242: firefox Mageia

CVSS: UnknownPublished
Published 13-07-2026Last modified 13-07-2026
Open JSON

Vulnerability summary

MGASA-2026-0242 is a vulnerability in firefox Mageia with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 29 · Downstream 0
CVE-2026-12289CVE-2026-12290CVE-2026-12291CVE-2026-12292CVE-2026-12294CVE-2026-12295

Timeline

  1. 13-07-2026
    PublishedVulnerability first disclosed.
  2. 13-07-2026
    Last modifiedVulnerability information updated.

Description

Updated firefox, firefox-l10n, rootcerts, nss packages fix security vulnerabilities The updated packages fix security vulnerabilities: Privilege escalation in the Graphics: WebRender component. (CVE-2026-12289) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12290) Use-after-free in the Networking: HTTP component. (CVE-2026-12291) Incorrect boundary conditions in the Web Audio component. (CVE-2026-12292) Sandbox escape in the DOM: Workers component. (CVE-2026-12294) Sandbox escape in the DOM: Navigation component. (CVE-2026-12295) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12298) Sandbox escape in the Security: Process Sandboxing component. (CVE-2026-12296) Sandbox escape due to incorrect boundary conditions in the Networking component. (CVE-2026-12297) JIT miscompilation in the DOM: Core & HTML component. (CVE-2026-12299) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12329) Mitigation bypass in the DOM: Security component. (CVE-2026-12302) Same-origin policy bypass in the Networking: Cookies component. (CVE-2026-12304) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12305) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12306) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12307) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12308) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12309) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12310) Information disclosure, sandbox escape in the Security: Process Sandboxing component. (CVE-2026-12311) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12312) Information disclosure, sandbox escape in the Security: Process Sandboxing component. (CVE-2026-12313) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12314) Mitigation bypass in the DOM: Security component. (CVE-2026-12315) Incorrect boundary conditions in the Internationalization component. (CVE-2026-12330) Incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-12324) Denial-of-service in the Graphics: ImageLib component. (CVE-2026-12325) Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152. (CVE-2026-12327) Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152. (CVE-2026-12328)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mageia8 products
  • firefox< 140.12.0-1.mga10
  • firefox-l10n< 140.12.0-1.mga10
  • nss< 3.125.0-1.mga10
  • rootcerts< 20260611.00-1.mga10
  • firefox< 140.12.0-1.mga9

1 vendor · 8 products

References

5 links