suse · CVE-2026-8946

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2026-8946 severity important: SUSE including 4 source package names (firefox-esr-140.11.0-1.1, firefox-esr-branding-upstream-140.11.0-1.1, firefox-esr-translations-common-140.11.0-1.1, firefox-esr-translations-other-140.11.0-1.1), 4 product×package rows across 1 product lines (openSUSE Tumbleweed): Fixed 4.

Description:

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.