Red Hat Security Advisory

RHSA-2026:24509

firefox security update

Released 2026-06-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) firefox-140.10.2-1.el9_2, firefox-x11-140.10.2-1.el9_2

TI-2026-07132 CVE-2026-8094 · GHSA-5ghx-9783-29rc

MEDIUM 49

Other issue in the WebRTC component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00446 Published 2026-05-07 Partial fix · 140.10.2 CWE-94

TI-2026-07128 CVE-2026-8090 · GHSA-4345-ccpc-8955

LOW 38

Use-after-free in the DOM: Networking component.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00317 Published 2026-05-07 Partial fix · 115.35.2, 140.10.2 +1 CWE-416

TI-2026-07130 CVE-2026-8092 · GHSA-2ch8-2mw7-grmm

LOW 37

Memory safety bugs present in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00414 Published 2026-05-07 Partial fix · 115.35.2, 140.10.2 +1 CWE-125