Red Hat Security Advisory

RHSA-2025:17346

thunderbird security update

Released 2025-10-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.4) thunderbird-140.3.0-1.el9_4

Fixes 8 records

TI-2024-11338 CVE-2024-12224 · GHSA-h97m-ww89-6jmq

idna accepts Punycode labels that do not produce any non-ASCII when decoded

MEDIUM 56

Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that sy…

CVSS 4.0MEDIUM 5.1 Network Low privileges No interaction EPSS 0.0023 Published 2025-05-30 Partial fix · 1.0.0 CWE-1289

TI-2025-09638 CVE-2025-10533 · GHSA-wjhw-rxqj-2g2h

Integer overflow in Mozilla Firefox

MEDIUM 41

Integer overflow in the SVG component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00781 Published 2025-09-16 Partial fix · 115.28, 140.3 +1 CWE-190

TI-2025-09642 CVE-2025-10537 · GHSA-579p-jcg6-h5r2

Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143

MEDIUM 40

Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00339 Published 2025-09-16 Partial fix · 140.3, 143 CWE-119

TI-2025-09633 CVE-2025-10528 · GHSA-5qj7-cv36-4gxh

Protection mechanism failure in Mozilla Firefox

LOW 38

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0037 Published 2025-09-16 Partial fix · 140.3, 143 CWE-693

TI-2025-09637 CVE-2025-10532 · GHSA-f2wr-3fjg-j32f

Improper check for unusual conditions in Mozilla Firefox

LOW 35

Incorrect boundary conditions in the JavaScript: GC component.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00328 Published 2025-09-16 Partial fix · 140.3, 143 CWE-754

TI-2025-09634 CVE-2025-10529 · GHSA-9qv5-m6vr-vh73

Same-origin policy bypass in the Layout component

LOW 35

Same-origin policy bypass in the Layout component.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00317 Published 2025-09-16 Partial fix · 140.3, 143 CWE-942

TI-2025-09632 CVE-2025-10527 · GHSA-5vxr-wr7m-x3p3

Use after free in Mozilla Firefox

LOW 31

Sandbox escape due to use-after-free in the Graphics: Canvas2D component.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0029 Published 2025-09-16 Partial fix · 140.3, 143 CWE-416

TI-2025-09641 CVE-2025-10536 · GHSA-74x5-q3v4-qjxx

Information disclosure in Mozilla Firefox

LOW 27

Information disclosure in the Networking: Cache component.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00175 Published 2025-09-16 Partial fix · 140.3, 143 CWE-200