Red Hat Security Advisory

RHSA-2026:3982

thunderbird security update

Released 2026-03-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.6) thunderbird-140.8.0-1.el9_6

Fixes 38 records

TI-2026-02377 CVE-2026-2773 · GHSA-gjwv-rvwj-p62j

Memory corruption in Mozilla Firefox

MEDIUM 51

Incorrect boundary conditions in the Web Audio component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00917 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-119

TI-2026-02395 CVE-2026-2791 · GHSA-vxjv-c6cq-74m6

Authentication bypass in Mozilla Firefox

MEDIUM 50

Mitigation bypass in the Networking: Cache component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00599 Published 2026-02-24 Partial fix · 140.8, 148 CWE-288

TI-2026-02392 CVE-2026-2788 · GHSA-cgrc-pwqf-64v8

Memory corruption in Mozilla Firefox

MEDIUM 50

Incorrect boundary conditions in the Audio/Video: GMP component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00677 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-119

TI-2026-02383 CVE-2026-2779 · GHSA-94rx-4fcc-c849

Memory corruption in Mozilla Firefox

MEDIUM 50

Incorrect boundary conditions in the Networking: JAR component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00686 Published 2026-02-24 Partial fix · 140.8, 148 CWE-119

TI-2026-02382 CVE-2026-2778 · GHSA-3qgm-jcxp-m9m6

Memory corruption in Mozilla Firefox

MEDIUM 50

Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00562 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-119

TI-2026-02380 CVE-2026-2776 · GHSA-v33x-35cm-8gjc

Memory corruption in Mozilla Firefox

MEDIUM 50

Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00562 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-119

TI-2026-02379 CVE-2026-2775 · GHSA-h3qc-gf9h-42g6

Authentication bypass in Mozilla Firefox

MEDIUM 50

Mitigation bypass in the DOM: HTML Parser component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00837 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-288

TI-2026-02375 CVE-2026-2771 · GHSA-m65f-px5x-xq9x

Out-of-bounds read in Mozilla Firefox

MEDIUM 50

Undefined behavior in the DOM: Core & HTML component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00759 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-125

TI-2026-02370 CVE-2026-2766 · GHSA-59x3-pvmj-2pw2

Use after free in Mozilla Firefox

MEDIUM 50

Use-after-free in the JavaScript Engine: JIT component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2026-02-24 Partial fix · 140.8, 148 CWE-416

TI-2026-02369 CVE-2026-2765 · GHSA-99p8-j693-qhpc

Use after free in Mozilla Firefox

MEDIUM 50

Use-after-free in the JavaScript Engine component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2026-02-24 Partial fix · 140.8, 148 CWE-416

TI-2026-02368 CVE-2026-2764 · GHSA-3jr5-gwfp-7mfw

Use after free in Mozilla Firefox

MEDIUM 50

JIT miscompilation, use-after-free in the JavaScript Engine: JIT component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-416

TI-2026-02367 CVE-2026-2763 · GHSA-qmr7-46p8-4c5r

Use after free in Mozilla Firefox

MEDIUM 50

Use-after-free in the JavaScript Engine component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-416

TI-2026-02366 CVE-2026-2762 · GHSA-v49m-r4w3-2p5x

Integer overflow in Mozilla Firefox

MEDIUM 50

Integer overflow in the JavaScript: Standard Library component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00632 Published 2026-02-24 Partial fix · 140.8, 148 CWE-190

TI-2026-02361 CVE-2026-2757 · GHSA-r2q9-885m-j92q

Incorrect boundary conditions in the WebRTC: Audio/Video component

MEDIUM 50

Incorrect boundary conditions in the WebRTC: Audio/Video component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00589 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-1384

TI-2026-02388 CVE-2026-2784 · GHSA-p4fg-vw73-vr29

Authentication bypass in Mozilla Firefox

MEDIUM 49

Mitigation bypass in the DOM: Security component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00488 Published 2026-02-24 Partial fix · 140.8, 148 CWE-288

TI-2026-02386 CVE-2026-2782 · GHSA-g9cv-cvhp-755f

Improper privilege management in Mozilla Firefox

MEDIUM 49

Privilege escalation in the Netmonitor component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00339 Published 2026-02-24 Partial fix · 140.8, 148 CWE-269

TI-2026-02384 CVE-2026-2780 · GHSA-839v-3vpr-fpgf

Improper privilege management in Mozilla Firefox

MEDIUM 49

Privilege escalation in the Netmonitor component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00395 Published 2026-02-24 Partial fix · 140.8, 148 CWE-269

TI-2026-02381 CVE-2026-2777 · GHSA-hjq8-wc3q-9xf3

Improper privilege management in Mozilla Firefox

MEDIUM 49

Privilege escalation in the Messaging System component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00439 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-269

TI-2026-02372 CVE-2026-2768 · GHSA-76rw-rj58-mpqc

Improper access control in Mozilla Firefox

MEDIUM 49

Sandbox escape in the Storage: IndexedDB component.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00439 Published 2026-02-24 Partial fix · 140.8, 148 CWE-284

TI-2026-02364 CVE-2026-2760 · GHSA-2255-92v8-4pvj

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component

MEDIUM 49

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00475 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-1384

TI-2026-02363 CVE-2026-2759 · GHSA-3hhv-j9r2-hr9c

Incorrect boundary conditions in the Graphics: ImageLib component

MEDIUM 49

Incorrect boundary conditions in the Graphics: ImageLib component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00475 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-1384

TI-2026-02391 CVE-2026-2787 · GHSA-xchm-7954-5wvg

Use after free in Mozilla Firefox

MEDIUM 44

Use-after-free in the DOM: Window and Location component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00641 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-416

TI-2026-02389 CVE-2026-2785 · GHSA-3px2-2xc4-mxr2

Invalid pointer in the JavaScript Engine component

MEDIUM 44

Invalid pointer in the JavaScript Engine component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00576 Published 2026-02-24 Partial fix · 140.8, 148 CWE-824

TI-2026-02378 CVE-2026-2774 · GHSA-wwg9-hv2r-mj8w

Integer overflow in Mozilla Firefox

MEDIUM 44

Integer overflow in the Audio/Video component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00852 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-190

TI-2026-02376 CVE-2026-2772 · GHSA-gxg5-574v-j5f6

Use after free in Mozilla Firefox

MEDIUM 44

Use-after-free in the Audio/Video: Playback component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-416

TI-2026-02374 CVE-2026-2770 · GHSA-5mg4-r7qx-2frp

Use after free in Mozilla Firefox

MEDIUM 44

Use-after-free in the DOM: Bindings (WebIDL) component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-416

TI-2026-02362 CVE-2026-2758 · GHSA-3cg8-wjp5-4rm6

Use after free in Mozilla Firefox

MEDIUM 44

Use-after-free in the JavaScript: GC component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00573 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-416

TI-2026-02397 CVE-2026-2793 · GHSA-48q6-99pr-mcvm

Out-of-bounds write in Mozilla Firefox

MEDIUM 43

Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00377 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-787

TI-2026-02396 CVE-2026-2792 · GHSA-6rcf-f85p-pmgj

Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148

MEDIUM 43

Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00377 Published 2026-02-24 Partial fix · 140.8, 148 CWE-787

TI-2026-02393 CVE-2026-2789 · GHSA-h79p-mfpr-8qm4

Use after free in Mozilla Firefox

MEDIUM 43

Use-after-free in the Graphics: ImageLib component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0053 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-416

TI-2026-02390 CVE-2026-2786 · GHSA-c5fj-xq9f-fjxm

Use after free in Mozilla Firefox

MEDIUM 43

Use-after-free in the JavaScript Engine component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00514 Published 2026-02-24 Partial fix · 140.8, 148 CWE-416

TI-2026-02385 CVE-2026-2781 · GHSA-q6rm-rhj9-jpg5

Integer overflow in Mozilla Firefox

MEDIUM 43

Integer overflow in the Libraries component in NSS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00433 Published 2026-02-24 Partial fix · 115.35, 140.8 +1 CWE-190

TI-2026-02371 CVE-2026-2767 · GHSA-x8jx-9xwq-xwq6

Use after free in Mozilla Firefox

MEDIUM 43

Use-after-free in the JavaScript: WebAssembly component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00462 Published 2026-02-24 Partial fix · 140.8, 148 CWE-416

TI-2026-02365 CVE-2026-2761 · GHSA-g5w7-69g8-vcwp

Protection mechanism failure in Mozilla Firefox

MEDIUM 43

Sandbox escape in the Graphics: WebRender component.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00475 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-693

TI-2026-02394 CVE-2026-2790 · GHSA-jvc5-7j9r-q4m6

Origin validation error in Mozilla Firefox

MEDIUM 42

Same-origin policy bypass in the Networking: JAR component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00254 Published 2026-02-24 Partial fix · 140.8, 148 CWE-346

TI-2026-02373 CVE-2026-2769 · GHSA-h67m-x9c3-v9wp

Use after free in Mozilla Firefox

MEDIUM 41

Use-after-free in the Storage: IndexedDB component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00686 Published 2026-02-24 Partial fix · 115.33, 140.8 +1 CWE-416

TI-2026-02077 CVE-2026-2447 · GHSA-c99q-x737-hc5j

Heap-based buffer overflow in Mozilla Firefox

MEDIUM 41

Heap buffer overflow in libvpx.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00699 Published 2026-02-16 Partial fix · 115.32.1, 140.7.1 +3 CWE-122

TI-2026-02387 CVE-2026-2783 · GHSA-7xqm-gm4h-p23x

Information disclosure in Mozilla Firefox

LOW 33

Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00342 Published 2026-02-24 Partial fix · 140.8, 148 CWE-200