OPENSUSE-SU-2026:20664-1

Vulnerability from csaf_opensuse - Published: 2026-05-01 17:00 - Updated: 2026-05-01 17:00
Summary
Security update for MozillaThunderbird
Severity
Important
Notes
Title of the patch: Security update for MozillaThunderbird
Description of the patch: This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: - Mozilla Thunderbird 140.10.0 ESR * Newly translated strings were not available in Thunderbird MFSA 2026-34 (bsc#1262230) * CVE-2026-6746 Use-after-free in the DOM: Core & HTML component * CVE-2026-6747 Use-after-free in the WebRTC component * CVE-2026-6748 Uninitialized memory in the Audio/Video: Web Codecs component * CVE-2026-6749 Information disclosure due to uninitialized memory in the Graphics: Canvas2D component * CVE-2026-6750 Privilege escalation in the Graphics: WebRender component * CVE-2026-6751 Uninitialized memory in the Audio/Video: Web Codecs component * CVE-2026-6752 Incorrect boundary conditions in the WebRTC component * CVE-2026-6753 Incorrect boundary conditions in the WebRTC component * CVE-2026-6754 Use-after-free in the JavaScript Engine component * CVE-2026-6757 Invalid pointer in the JavaScript: WebAssembly component * CVE-2026-6759 Use-after-free in the Widget: Cocoa component * CVE-2026-6761 Privilege escalation in the Networking component * CVE-2026-6762 Spoofing issue in the DOM: Core & HTML component * CVE-2026-6763 Mitigation bypass in the File Handling component * CVE-2026-6764 Incorrect boundary conditions in the DOM: Device Interfaces component * CVE-2026-6765 Information disclosure in the Form Autofill component * CVE-2026-6766 Incorrect boundary conditions in the Libraries component in NSS * CVE-2026-6767 Other issue in the Libraries component in NSS * CVE-2026-6769 Privilege escalation in the Debugger component * CVE-2026-6770 Other issue in the Storage: IndexedDB component * CVE-2026-6771 Mitigation bypass in the DOM: Security component * CVE-2026-6772 Incorrect boundary conditions in the Libraries component in NSS * CVE-2026-6776 Incorrect boundary conditions in the WebRTC: Networking component * CVE-2026-6785 Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 * CVE-2026-6786 Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 - Mozilla Thunderbird 140.9.1 ESR MFSA 2026-29 * CVE-2026-5732 Incorrect boundary conditions, integer overflow in the Graphics: Text component * CVE-2026-5731 Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 * CVE-2026-5734 Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 - Mozilla Thunderbird 140.9.0 ESR MFSA 2026-24 (bsc#1260083) * CVE-2026-3889 Spoofing issue in Thunderbird * CVE-2026-4371 Out of bounds read in IMAP parsing * CVE-2026-4684 Race condition, use-after-free in the Graphics: WebRender component * CVE-2026-4685 Incorrect boundary conditions in the Graphics: Canvas2D component * CVE-2026-4686 Incorrect boundary conditions in the Graphics: Canvas2D component * CVE-2026-4687 Sandbox escape due to incorrect boundary conditions in the Telemetry component * CVE-2026-4688 Sandbox escape due to use-after-free in the Disability Access APIs component * CVE-2026-4689 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component * CVE-2026-4690 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component * CVE-2026-4691 Use-after-free in the CSS Parsing and Computation component * CVE-2026-4692 Sandbox escape in the Responsive Design Mode component * CVE-2026-4693 Incorrect boundary conditions in the Audio/Video: Playback component * CVE-2026-4694 Incorrect boundary conditions, integer overflow in the Graphics component * CVE-2026-4695 Incorrect boundary conditions in the Audio/Video: Web Codecs component * CVE-2026-4696 Use-after-free in the Layout: Text and Fonts component * CVE-2026-4697 Incorrect boundary conditions in the Audio/Video: Web Codecs component * CVE-2026-4698 JIT miscompilation in the JavaScript Engine: JIT component * CVE-2026-4699 Incorrect boundary conditions in the Layout: Text and Fonts component * CVE-2026-4700 Mitigation bypass in the Networking: HTTP component * CVE-2026-4701 Use-after-free in the JavaScript Engine component * CVE-2026-4702 JIT miscompilation in the JavaScript Engine component * CVE-2026-4704 Denial-of-service in the WebRTC: Signaling component * CVE-2026-4705 Undefined behavior in the WebRTC: Signaling component * CVE-2026-4706 Incorrect boundary conditions in the Graphics: Canvas2D component * CVE-2026-4707 Incorrect boundary conditions in the Graphics: Canvas2D component * CVE-2026-4708 Incorrect boundary conditions in the Graphics component * CVE-2026-4709 Incorrect boundary conditions in the Audio/Video: GMP component * CVE-2026-4710 Incorrect boundary conditions in the Audio/Video component * CVE-2026-4711 Use-after-free in the Widget: Cocoa component * CVE-2026-4712 Information disclosure in the Widget: Cocoa component * CVE-2026-4713 Incorrect boundary conditions in the Graphics component * CVE-2026-4714 Incorrect boundary conditions in the Audio/Video component * CVE-2026-4715 Uninitialized memory in the Graphics: Canvas2D component * CVE-2026-4716 Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component * CVE-2026-4717 Privilege escalation in the Netmonitor component * CVE-2025-59375 Denial-of-service in the XML component * CVE-2026-4718 Undefined behavior in the WebRTC: Signaling component * CVE-2026-4719 Incorrect boundary conditions in the Graphics: Text component * CVE-2026-4720 Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 * CVE-2026-4721 Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149
Patchnames: openSUSE-Leap-16.0-packagehub-230
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2025-59375
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-3889
5.4 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4371
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4684
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4685
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4686
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4687
8.3 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4688
8.3 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4689
8.3 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4690
8.3 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4691
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4692
8.3 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4693
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4694
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4695
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4696
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4697
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4698
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4699
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4700
5.4 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4701
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4702
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4704
4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4705
5 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4706
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4707
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4708
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4709
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4710
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4711
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4712
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4713
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4714
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4715
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4716
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4717
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4718
5 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4719
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4720
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-4721
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-5731
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-5732
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-5734
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6746
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6747
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6748
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6749
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6750
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6751
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6752
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6753
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6754
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6757
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6759
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6761
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6762
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6763
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6764
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6765
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6766
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6767
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6769
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6770
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6771
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6772
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6776
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6785
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-6786
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
References
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://bugzilla.suse.com/1260083 self
https://bugzilla.suse.com/1262230 self
https://www.suse.com/security/cve/CVE-2025-59375/ self
https://www.suse.com/security/cve/CVE-2026-3889/ self
https://www.suse.com/security/cve/CVE-2026-4371/ self
https://www.suse.com/security/cve/CVE-2026-4684/ self
https://www.suse.com/security/cve/CVE-2026-4685/ self
https://www.suse.com/security/cve/CVE-2026-4686/ self
https://www.suse.com/security/cve/CVE-2026-4687/ self
https://www.suse.com/security/cve/CVE-2026-4688/ self
https://www.suse.com/security/cve/CVE-2026-4689/ self
https://www.suse.com/security/cve/CVE-2026-4690/ self
https://www.suse.com/security/cve/CVE-2026-4691/ self
https://www.suse.com/security/cve/CVE-2026-4692/ self
https://www.suse.com/security/cve/CVE-2026-4693/ self
https://www.suse.com/security/cve/CVE-2026-4694/ self
https://www.suse.com/security/cve/CVE-2026-4695/ self
https://www.suse.com/security/cve/CVE-2026-4696/ self
https://www.suse.com/security/cve/CVE-2026-4697/ self
https://www.suse.com/security/cve/CVE-2026-4698/ self
https://www.suse.com/security/cve/CVE-2026-4699/ self
https://www.suse.com/security/cve/CVE-2026-4700/ self
https://www.suse.com/security/cve/CVE-2026-4701/ self
https://www.suse.com/security/cve/CVE-2026-4702/ self
https://www.suse.com/security/cve/CVE-2026-4704/ self
https://www.suse.com/security/cve/CVE-2026-4705/ self
https://www.suse.com/security/cve/CVE-2026-4706/ self
https://www.suse.com/security/cve/CVE-2026-4707/ self
https://www.suse.com/security/cve/CVE-2026-4708/ self
https://www.suse.com/security/cve/CVE-2026-4709/ self
https://www.suse.com/security/cve/CVE-2026-4710/ self
https://www.suse.com/security/cve/CVE-2026-4711/ self
https://www.suse.com/security/cve/CVE-2026-4712/ self
https://www.suse.com/security/cve/CVE-2026-4713/ self
https://www.suse.com/security/cve/CVE-2026-4714/ self
https://www.suse.com/security/cve/CVE-2026-4715/ self
https://www.suse.com/security/cve/CVE-2026-4716/ self
https://www.suse.com/security/cve/CVE-2026-4717/ self
https://www.suse.com/security/cve/CVE-2026-4718/ self
https://www.suse.com/security/cve/CVE-2026-4719/ self
https://www.suse.com/security/cve/CVE-2026-4720/ self
https://www.suse.com/security/cve/CVE-2026-4721/ self
https://www.suse.com/security/cve/CVE-2026-5731/ self
https://www.suse.com/security/cve/CVE-2026-5732/ self
https://www.suse.com/security/cve/CVE-2026-5734/ self
https://www.suse.com/security/cve/CVE-2026-6746/ self
https://www.suse.com/security/cve/CVE-2026-6747/ self
https://www.suse.com/security/cve/CVE-2026-6748/ self
https://www.suse.com/security/cve/CVE-2026-6749/ self
https://www.suse.com/security/cve/CVE-2026-6750/ self
https://www.suse.com/security/cve/CVE-2026-6751/ self
https://www.suse.com/security/cve/CVE-2026-6752/ self
https://www.suse.com/security/cve/CVE-2026-6753/ self
https://www.suse.com/security/cve/CVE-2026-6754/ self
https://www.suse.com/security/cve/CVE-2026-6757/ self
https://www.suse.com/security/cve/CVE-2026-6759/ self
https://www.suse.com/security/cve/CVE-2026-6761/ self
https://www.suse.com/security/cve/CVE-2026-6762/ self
https://www.suse.com/security/cve/CVE-2026-6763/ self
https://www.suse.com/security/cve/CVE-2026-6764/ self
https://www.suse.com/security/cve/CVE-2026-6765/ self
https://www.suse.com/security/cve/CVE-2026-6766/ self
https://www.suse.com/security/cve/CVE-2026-6767/ self
https://www.suse.com/security/cve/CVE-2026-6769/ self
https://www.suse.com/security/cve/CVE-2026-6770/ self
https://www.suse.com/security/cve/CVE-2026-6771/ self
https://www.suse.com/security/cve/CVE-2026-6772/ self
https://www.suse.com/security/cve/CVE-2026-6776/ self
https://www.suse.com/security/cve/CVE-2026-6785/ self
https://www.suse.com/security/cve/CVE-2026-6786/ self
https://www.suse.com/security/cve/CVE-2025-59375 external
https://bugzilla.suse.com/1249584 external
https://www.suse.com/security/cve/CVE-2026-3889 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4371 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4684 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4685 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4686 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4687 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4688 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4689 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4690 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4691 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4692 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4693 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4694 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4695 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4696 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4697 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4698 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4699 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4700 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4701 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4702 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4704 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4705 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4706 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4707 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4708 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4709 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4710 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4711 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4712 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4713 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4714 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4715 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4716 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4717 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4718 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4719 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4720 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-4721 external
https://bugzilla.suse.com/1260083 external
https://www.suse.com/security/cve/CVE-2026-5731 external
https://bugzilla.suse.com/1261663 external
https://www.suse.com/security/cve/CVE-2026-5732 external
https://bugzilla.suse.com/1261663 external
https://www.suse.com/security/cve/CVE-2026-5734 external
https://bugzilla.suse.com/1261663 external
https://www.suse.com/security/cve/CVE-2026-6746 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6747 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6748 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6749 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6750 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6751 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6752 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6753 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6754 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6757 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6759 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6761 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6762 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6763 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6764 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6765 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6766 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6767 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6769 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6770 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6771 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6772 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6776 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6785 external
https://bugzilla.suse.com/1262230 external
https://www.suse.com/security/cve/CVE-2026-6786 external
https://bugzilla.suse.com/1262230 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for MozillaThunderbird",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for MozillaThunderbird fixes the following issues:\n\nChanges in MozillaThunderbird:\n\n- Mozilla Thunderbird 140.10.0 ESR\n  * Newly translated strings were not available in Thunderbird\n  MFSA 2026-34 (bsc#1262230)\n  * CVE-2026-6746 Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-6747 Use-after-free in the WebRTC component\n  * CVE-2026-6748 Uninitialized memory in the Audio/Video: Web Codecs component\n  * CVE-2026-6749 Information disclosure due to uninitialized memory in the Graphics: Canvas2D component\n  * CVE-2026-6750 Privilege escalation in the Graphics: WebRender component\n  * CVE-2026-6751 Uninitialized memory in the Audio/Video: Web Codecs component\n  * CVE-2026-6752 Incorrect boundary conditions in the WebRTC component\n  * CVE-2026-6753 Incorrect boundary conditions in the WebRTC component\n  * CVE-2026-6754 Use-after-free in the JavaScript Engine component\n  * CVE-2026-6757 Invalid pointer in the JavaScript: WebAssembly component\n  * CVE-2026-6759 Use-after-free in the Widget: Cocoa component\n  * CVE-2026-6761 Privilege escalation in the Networking component\n  * CVE-2026-6762 Spoofing issue in the DOM: Core \u0026 HTML component\n  * CVE-2026-6763 Mitigation bypass in the File Handling component\n  * CVE-2026-6764 Incorrect boundary conditions in the DOM: Device Interfaces component\n  * CVE-2026-6765 Information disclosure in the Form Autofill component\n  * CVE-2026-6766 Incorrect boundary conditions in the Libraries component in NSS\n  * CVE-2026-6767 Other issue in the Libraries component in NSS\n  * CVE-2026-6769 Privilege escalation in the Debugger component\n  * CVE-2026-6770 Other issue in the Storage: IndexedDB component\n  * CVE-2026-6771 Mitigation bypass in the DOM: Security component\n  * CVE-2026-6772 Incorrect boundary conditions in the Libraries component in NSS\n  * CVE-2026-6776 Incorrect boundary conditions in the WebRTC: Networking component\n  * CVE-2026-6785 Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150\n  * CVE-2026-6786 Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150\n\n- Mozilla Thunderbird 140.9.1 ESR\n  MFSA 2026-29\n  * CVE-2026-5732 Incorrect boundary conditions, integer overflow in the Graphics: Text component\n  * CVE-2026-5731 Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2\n  * CVE-2026-5734 Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2\n\n- Mozilla Thunderbird 140.9.0 ESR\n  MFSA 2026-24 (bsc#1260083)\n  * CVE-2026-3889 Spoofing issue in Thunderbird\n  * CVE-2026-4371 Out of bounds read in IMAP parsing\n  * CVE-2026-4684 Race condition, use-after-free in the Graphics: WebRender component\n  * CVE-2026-4685 Incorrect boundary conditions in the Graphics: Canvas2D component\n  * CVE-2026-4686 Incorrect boundary conditions in the Graphics: Canvas2D component\n  * CVE-2026-4687 Sandbox escape due to incorrect boundary conditions in the Telemetry component\n  * CVE-2026-4688 Sandbox escape due to use-after-free in the Disability Access APIs component\n  * CVE-2026-4689 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component\n  * CVE-2026-4690 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component\n  * CVE-2026-4691 Use-after-free in the CSS Parsing and Computation component\n  * CVE-2026-4692 Sandbox escape in the Responsive Design Mode component\n  * CVE-2026-4693 Incorrect boundary conditions in the Audio/Video: Playback component\n  * CVE-2026-4694 Incorrect boundary conditions, integer overflow in the Graphics component\n  * CVE-2026-4695 Incorrect boundary conditions in the Audio/Video: Web Codecs component\n  * CVE-2026-4696 Use-after-free in the Layout: Text and Fonts component\n  * CVE-2026-4697 Incorrect boundary conditions in the Audio/Video: Web Codecs component\n  * CVE-2026-4698 JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-4699 Incorrect boundary conditions in the Layout: Text and Fonts component\n  * CVE-2026-4700 Mitigation bypass in the Networking: HTTP component\n  * CVE-2026-4701 Use-after-free in the JavaScript Engine component\n  * CVE-2026-4702 JIT miscompilation in the JavaScript Engine component\n  * CVE-2026-4704 Denial-of-service in the WebRTC: Signaling component\n  * CVE-2026-4705 Undefined behavior in the WebRTC: Signaling component\n  * CVE-2026-4706 Incorrect boundary conditions in the Graphics: Canvas2D component\n  * CVE-2026-4707 Incorrect boundary conditions in the Graphics: Canvas2D component\n  * CVE-2026-4708 Incorrect boundary conditions in the Graphics component\n  * CVE-2026-4709 Incorrect boundary conditions in the Audio/Video: GMP component\n  * CVE-2026-4710 Incorrect boundary conditions in the Audio/Video component\n  * CVE-2026-4711 Use-after-free in the Widget: Cocoa component\n  * CVE-2026-4712 Information disclosure in the Widget: Cocoa component\n  * CVE-2026-4713 Incorrect boundary conditions in the Graphics component\n  * CVE-2026-4714 Incorrect boundary conditions in the Audio/Video component\n  * CVE-2026-4715 Uninitialized memory in the Graphics: Canvas2D component\n  * CVE-2026-4716 Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component\n  * CVE-2026-4717 Privilege escalation in the Netmonitor component\n  * CVE-2025-59375 Denial-of-service in the XML component\n  * CVE-2026-4718 Undefined behavior in the WebRTC: Signaling component\n  * CVE-2026-4719 Incorrect boundary conditions in the Graphics: Text component\n  * CVE-2026-4720 Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149\n  * CVE-2026-4721 Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-packagehub-230",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20664-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1260083",
        "url": "https://bugzilla.suse.com/1260083"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262230",
        "url": "https://bugzilla.suse.com/1262230"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-59375 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-59375/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-3889 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-3889/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4371 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4371/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4684 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4684/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4685 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4685/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4686 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4686/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4687 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4687/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4688 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4688/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4689 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4689/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4690 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4690/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4691 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4691/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4692 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4692/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4693 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4693/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4694 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4694/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4695 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4695/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4696 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4696/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4697 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4697/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4698 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4698/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4699 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4699/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4700 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4700/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4701 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4701/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4702 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4702/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4704 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4704/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4705 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4705/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4706 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4706/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4707 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4707/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4708 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4708/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4709 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4709/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4710 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4710/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4711 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4711/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4712 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4712/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4713 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4713/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4714 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4714/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4715 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4715/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4716 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4716/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4717 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4717/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4718 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4718/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4719 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4719/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4720 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4720/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4721 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4721/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5731 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5731/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5732 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5732/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-5734 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-5734/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6746 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6746/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6747 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6747/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6748 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6748/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6749 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6749/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6750 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6750/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6751 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6751/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6752 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6752/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6753 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6753/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6754 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6754/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6757 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6757/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6759 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6759/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6761 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6761/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6762 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6762/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6763 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6763/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6764 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6764/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6765 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6765/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6766 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6766/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6767 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6767/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6769 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6769/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6770 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6770/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6771 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6771/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6772 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6772/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6776 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6776/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6785 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6785/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6786 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6786/"
      }
    ],
    "title": "Security update for MozillaThunderbird",
    "tracking": {
      "current_release_date": "2026-05-01T17:00:28Z",
      "generator": {
        "date": "2026-05-01T17:00:28Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:20664-1",
      "initial_release_date": "2026-05-01T17:00:28Z",
      "revision_history": [
        {
          "date": "2026-05-01T17:00:28Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
                  "product_id": "MozillaThunderbird-140.10.0-bp160.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
                  "product_id": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
                  "product_id": "MozillaThunderbird-140.10.0-bp160.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
                  "product_id": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.10.0-bp160.1.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-140.10.0-bp160.1.1.s390x",
                  "product_id": "MozillaThunderbird-140.10.0-bp160.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
                  "product_id": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
                  "product_id": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
                  "product_id": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
                  "product_id": "MozillaThunderbird-140.10.0-bp160.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
                  "product_id": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.10.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.10.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.10.0-bp160.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x"
        },
        "product_reference": "MozillaThunderbird-140.10.0-bp160.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.10.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x"
        },
        "product_reference": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-59375",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-59375"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-59375",
          "url": "https://www.suse.com/security/cve/CVE-2025-59375"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1249584 for CVE-2025-59375",
          "url": "https://bugzilla.suse.com/1249584"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-59375"
    },
    {
      "cve": "CVE-2026-3889",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-3889"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-3889",
          "url": "https://www.suse.com/security/cve/CVE-2026-3889"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-3889",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-3889"
    },
    {
      "cve": "CVE-2026-4371",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4371"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially crashing Thunderbird or leaking sensitive data. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4371",
          "url": "https://www.suse.com/security/cve/CVE-2026-4371"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4371",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4371"
    },
    {
      "cve": "CVE-2026-4684",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4684"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4684",
          "url": "https://www.suse.com/security/cve/CVE-2026-4684"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4684",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4684"
    },
    {
      "cve": "CVE-2026-4685",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4685"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4685",
          "url": "https://www.suse.com/security/cve/CVE-2026-4685"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4685",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4685"
    },
    {
      "cve": "CVE-2026-4686",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4686"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4686",
          "url": "https://www.suse.com/security/cve/CVE-2026-4686"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4686",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4686"
    },
    {
      "cve": "CVE-2026-4687",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4687"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4687",
          "url": "https://www.suse.com/security/cve/CVE-2026-4687"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4687",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4687"
    },
    {
      "cve": "CVE-2026-4688",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4688"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4688",
          "url": "https://www.suse.com/security/cve/CVE-2026-4688"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4688",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4688"
    },
    {
      "cve": "CVE-2026-4689",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4689"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4689",
          "url": "https://www.suse.com/security/cve/CVE-2026-4689"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4689",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4689"
    },
    {
      "cve": "CVE-2026-4690",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4690"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4690",
          "url": "https://www.suse.com/security/cve/CVE-2026-4690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4690",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4690"
    },
    {
      "cve": "CVE-2026-4691",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4691"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4691",
          "url": "https://www.suse.com/security/cve/CVE-2026-4691"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4691",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4691"
    },
    {
      "cve": "CVE-2026-4692",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4692"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4692",
          "url": "https://www.suse.com/security/cve/CVE-2026-4692"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4692",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4692"
    },
    {
      "cve": "CVE-2026-4693",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4693"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4693",
          "url": "https://www.suse.com/security/cve/CVE-2026-4693"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4693",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4693"
    },
    {
      "cve": "CVE-2026-4694",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4694"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4694",
          "url": "https://www.suse.com/security/cve/CVE-2026-4694"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4694",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4694"
    },
    {
      "cve": "CVE-2026-4695",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4695"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4695",
          "url": "https://www.suse.com/security/cve/CVE-2026-4695"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4695",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4695"
    },
    {
      "cve": "CVE-2026-4696",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4696"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4696",
          "url": "https://www.suse.com/security/cve/CVE-2026-4696"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4696",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4696"
    },
    {
      "cve": "CVE-2026-4697",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4697"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4697",
          "url": "https://www.suse.com/security/cve/CVE-2026-4697"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4697",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4697"
    },
    {
      "cve": "CVE-2026-4698",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4698"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4698",
          "url": "https://www.suse.com/security/cve/CVE-2026-4698"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4698",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4698"
    },
    {
      "cve": "CVE-2026-4699",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4699"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4699",
          "url": "https://www.suse.com/security/cve/CVE-2026-4699"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4699",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4699"
    },
    {
      "cve": "CVE-2026-4700",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4700"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4700",
          "url": "https://www.suse.com/security/cve/CVE-2026-4700"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4700",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4700"
    },
    {
      "cve": "CVE-2026-4701",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4701"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4701",
          "url": "https://www.suse.com/security/cve/CVE-2026-4701"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4701",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4701"
    },
    {
      "cve": "CVE-2026-4702",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4702"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4702",
          "url": "https://www.suse.com/security/cve/CVE-2026-4702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4702",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4702"
    },
    {
      "cve": "CVE-2026-4704",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4704"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4704",
          "url": "https://www.suse.com/security/cve/CVE-2026-4704"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4704",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4704"
    },
    {
      "cve": "CVE-2026-4705",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4705"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4705",
          "url": "https://www.suse.com/security/cve/CVE-2026-4705"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4705",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4705"
    },
    {
      "cve": "CVE-2026-4706",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4706"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4706",
          "url": "https://www.suse.com/security/cve/CVE-2026-4706"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4706",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4706"
    },
    {
      "cve": "CVE-2026-4707",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4707"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4707",
          "url": "https://www.suse.com/security/cve/CVE-2026-4707"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4707",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4707"
    },
    {
      "cve": "CVE-2026-4708",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4708"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4708",
          "url": "https://www.suse.com/security/cve/CVE-2026-4708"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4708",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4708"
    },
    {
      "cve": "CVE-2026-4709",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4709"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4709",
          "url": "https://www.suse.com/security/cve/CVE-2026-4709"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4709",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4709"
    },
    {
      "cve": "CVE-2026-4710",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4710"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4710",
          "url": "https://www.suse.com/security/cve/CVE-2026-4710"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4710",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4710"
    },
    {
      "cve": "CVE-2026-4711",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4711"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4711",
          "url": "https://www.suse.com/security/cve/CVE-2026-4711"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4711",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4711"
    },
    {
      "cve": "CVE-2026-4712",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4712"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4712",
          "url": "https://www.suse.com/security/cve/CVE-2026-4712"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4712",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4712"
    },
    {
      "cve": "CVE-2026-4713",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4713"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4713",
          "url": "https://www.suse.com/security/cve/CVE-2026-4713"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4713",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4713"
    },
    {
      "cve": "CVE-2026-4714",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4714"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4714",
          "url": "https://www.suse.com/security/cve/CVE-2026-4714"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4714",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4714"
    },
    {
      "cve": "CVE-2026-4715",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4715"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4715",
          "url": "https://www.suse.com/security/cve/CVE-2026-4715"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4715",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4715"
    },
    {
      "cve": "CVE-2026-4716",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4716"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4716",
          "url": "https://www.suse.com/security/cve/CVE-2026-4716"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4716",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4716"
    },
    {
      "cve": "CVE-2026-4717",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4717"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4717",
          "url": "https://www.suse.com/security/cve/CVE-2026-4717"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4717",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4717"
    },
    {
      "cve": "CVE-2026-4718",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4718"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4718",
          "url": "https://www.suse.com/security/cve/CVE-2026-4718"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4718",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4718"
    },
    {
      "cve": "CVE-2026-4719",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4719"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4719",
          "url": "https://www.suse.com/security/cve/CVE-2026-4719"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4719",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4719"
    },
    {
      "cve": "CVE-2026-4720",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4720"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4720",
          "url": "https://www.suse.com/security/cve/CVE-2026-4720"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4720",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4720"
    },
    {
      "cve": "CVE-2026-4721",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4721"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4721",
          "url": "https://www.suse.com/security/cve/CVE-2026-4721"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260083 for CVE-2026-4721",
          "url": "https://bugzilla.suse.com/1260083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4721"
    },
    {
      "cve": "CVE-2026-5731",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5731"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5731",
          "url": "https://www.suse.com/security/cve/CVE-2026-5731"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261663 for CVE-2026-5731",
          "url": "https://bugzilla.suse.com/1261663"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-5731"
    },
    {
      "cve": "CVE-2026-5732",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5732"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5732",
          "url": "https://www.suse.com/security/cve/CVE-2026-5732"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261663 for CVE-2026-5732",
          "url": "https://bugzilla.suse.com/1261663"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-5732"
    },
    {
      "cve": "CVE-2026-5734",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-5734"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-5734",
          "url": "https://www.suse.com/security/cve/CVE-2026-5734"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261663 for CVE-2026-5734",
          "url": "https://bugzilla.suse.com/1261663"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-5734"
    },
    {
      "cve": "CVE-2026-6746",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6746"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6746",
          "url": "https://www.suse.com/security/cve/CVE-2026-6746"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6746",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6746"
    },
    {
      "cve": "CVE-2026-6747",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6747"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6747",
          "url": "https://www.suse.com/security/cve/CVE-2026-6747"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6747",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6747"
    },
    {
      "cve": "CVE-2026-6748",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6748"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6748",
          "url": "https://www.suse.com/security/cve/CVE-2026-6748"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6748",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6748"
    },
    {
      "cve": "CVE-2026-6749",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6749"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6749",
          "url": "https://www.suse.com/security/cve/CVE-2026-6749"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6749",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6749"
    },
    {
      "cve": "CVE-2026-6750",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6750"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6750",
          "url": "https://www.suse.com/security/cve/CVE-2026-6750"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6750",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6750"
    },
    {
      "cve": "CVE-2026-6751",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6751"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6751",
          "url": "https://www.suse.com/security/cve/CVE-2026-6751"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6751",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6751"
    },
    {
      "cve": "CVE-2026-6752",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6752"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6752",
          "url": "https://www.suse.com/security/cve/CVE-2026-6752"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6752",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6752"
    },
    {
      "cve": "CVE-2026-6753",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6753"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6753",
          "url": "https://www.suse.com/security/cve/CVE-2026-6753"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6753",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6753"
    },
    {
      "cve": "CVE-2026-6754",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6754"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6754",
          "url": "https://www.suse.com/security/cve/CVE-2026-6754"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6754",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6754"
    },
    {
      "cve": "CVE-2026-6757",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6757"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6757",
          "url": "https://www.suse.com/security/cve/CVE-2026-6757"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6757",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6757"
    },
    {
      "cve": "CVE-2026-6759",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6759"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6759",
          "url": "https://www.suse.com/security/cve/CVE-2026-6759"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6759",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6759"
    },
    {
      "cve": "CVE-2026-6761",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6761"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6761",
          "url": "https://www.suse.com/security/cve/CVE-2026-6761"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6761",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6761"
    },
    {
      "cve": "CVE-2026-6762",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6762"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Spoofing issue in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6762",
          "url": "https://www.suse.com/security/cve/CVE-2026-6762"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6762",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6762"
    },
    {
      "cve": "CVE-2026-6763",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6763"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6763",
          "url": "https://www.suse.com/security/cve/CVE-2026-6763"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6763",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6763"
    },
    {
      "cve": "CVE-2026-6764",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6764"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6764",
          "url": "https://www.suse.com/security/cve/CVE-2026-6764"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6764",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6764"
    },
    {
      "cve": "CVE-2026-6765",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6765"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6765",
          "url": "https://www.suse.com/security/cve/CVE-2026-6765"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6765",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6765"
    },
    {
      "cve": "CVE-2026-6766",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6766"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6766",
          "url": "https://www.suse.com/security/cve/CVE-2026-6766"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6766",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6766"
    },
    {
      "cve": "CVE-2026-6767",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6767"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6767",
          "url": "https://www.suse.com/security/cve/CVE-2026-6767"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6767",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6767"
    },
    {
      "cve": "CVE-2026-6769",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6769"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Privilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6769",
          "url": "https://www.suse.com/security/cve/CVE-2026-6769"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6769",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6769"
    },
    {
      "cve": "CVE-2026-6770",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6770"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6770",
          "url": "https://www.suse.com/security/cve/CVE-2026-6770"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6770",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6770"
    },
    {
      "cve": "CVE-2026-6771",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6771"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6771",
          "url": "https://www.suse.com/security/cve/CVE-2026-6771"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6771",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6771"
    },
    {
      "cve": "CVE-2026-6772",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6772"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6772",
          "url": "https://www.suse.com/security/cve/CVE-2026-6772"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6772",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6772"
    },
    {
      "cve": "CVE-2026-6776",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6776"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6776",
          "url": "https://www.suse.com/security/cve/CVE-2026-6776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6776",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6776"
    },
    {
      "cve": "CVE-2026-6785",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6785"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6785",
          "url": "https://www.suse.com/security/cve/CVE-2026-6785"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6785",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6785"
    },
    {
      "cve": "CVE-2026-6786",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6786"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6786",
          "url": "https://www.suse.com/security/cve/CVE-2026-6786"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262230 for CVE-2026-6786",
          "url": "https://bugzilla.suse.com/1262230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-openpgp-librnp-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-common-140.10.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:MozillaThunderbird-translations-other-140.10.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-01T17:00:28Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-6786"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.