TI-2025-13085 CVE-2025-14324 · GHSA-c45v-h9vf-q66x
Code injection in Mozilla Firefox
Priority MEDIUM 50
JIT miscompilation in the JavaScript Engine: JIT component.
RHSA-2026:0019
thunderbird security update
Released 2026-01-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.2) thunderbird-140.6.0-1.el9_2
Fixes 10 records
TI-2025-13082 CVE-2025-14321 · GHSA-g2fh-3663-3jf8
Use after free in Mozilla Firefox
Priority MEDIUM 50
Use-after-free in the WebRTC: Signaling component.
TI-2025-13091 CVE-2025-14330 · GHSA-r52p-x88m-mm4j
Memory corruption in Mozilla Firefox
Priority MEDIUM 49
JIT miscompilation in the JavaScript Engine: JIT component.
TI-2025-13090 CVE-2025-14329 · GHSA-vxvx-cxrx-x52j
Privilege escalation in the Netmonitor component
Priority MEDIUM 40
Privilege escalation in the Netmonitor component.
TI-2025-13089 CVE-2025-14328 · GHSA-7873-9g8c-6fm2
Privilege escalation in the Netmonitor component
Priority MEDIUM 40
Privilege escalation in the Netmonitor component.
TI-2025-13084 CVE-2025-14323 · GHSA-24pp-jv4q-cp8j
Privilege escalation in the DOM: Notifications component
Priority MEDIUM 40
Privilege escalation in the DOM: Notifications component.
TI-2025-13094 CVE-2025-14333 · GHSA-4mm6-6c2q-x3fp
Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146
Priority LOW 38
Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145.
TI-2025-13086 CVE-2025-14325 · GHSA-364v-7wgj-4r69
Type confusion in Mozilla Firefox
Priority LOW 38
JIT miscompilation in the JavaScript Engine: JIT component.
TI-2025-13083 CVE-2025-14322 · GHSA-w8g6-3pw6-4hxr
Improper check for unusual conditions in Mozilla Firefox
Priority LOW 37
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component.
TI-2025-13092 CVE-2025-14331 · GHSA-pq76-9m6x-m6mx
Origin validation error in Mozilla Firefox
Priority LOW 34
Same-origin policy bypass in the Request Handling component.