Red Hat Security Advisory

RHSA-2026:54180

firefox security update

Released 2026-08-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) firefox-140.13.0-1.el8_4
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) firefox-140.13.0-1.el8_4

Fixes 33 records

TI-2026-13719 CVE-2026-16412 · GHSA-xrr7-cwrw-39vw

Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153

MEDIUM 50

Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00636 Published 2026-07-21 Partial fix · 140.13, 153 CWE-119

TI-2026-13664 CVE-2026-16357 · GHSA-gm5x-4m73-f248

Memory corruption in Mozilla Firefox

MEDIUM 50

Incorrect boundary conditions in the Graphics component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00868 Published 2026-07-21 Partial fix · 115.38, 140.13 +1 CWE-119

TI-2026-13690 CVE-2026-16383 · GHSA-jv2w-p5jv-grr5

Protection mechanism failure in Mozilla Firefox

MEDIUM 49

Mitigation bypass in the DOM: Networking component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00387 Published 2026-07-21 Partial fix · 140.13, 153 CWE-693

TI-2026-13684 CVE-2026-16377 · GHSA-9qmg-vj62-g95q

Protection mechanism failure in Mozilla Firefox

MEDIUM 49

Mitigation bypass in the PDF Viewer component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00387 Published 2026-07-21 Partial fix · 140.13, 153 CWE-693

TI-2026-13676 CVE-2026-16369 · GHSA-54w4-5mrc-hfp8

Integer overflow in Mozilla Firefox

MEDIUM 49

Integer overflow in the JavaScript: WebAssembly component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00436 Published 2026-07-21 Partial fix · 140.13, 153 CWE-190

TI-2026-13675 CVE-2026-16368 · GHSA-h7w4-g832-m899

Memory corruption in Mozilla Firefox

MEDIUM 49

Incorrect boundary conditions in the JavaScript: WebAssembly component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00388 Published 2026-07-21 Partial fix · 140.13, 153 CWE-119

TI-2026-13670 CVE-2026-16363 · GHSA-3mwp-7c29-vp5v

Type confusion in Mozilla Firefox

MEDIUM 49

JIT miscompilation in the JavaScript: WebAssembly component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00436 Published 2026-07-21 Partial fix · 140.13, 153 CWE-682

TI-2026-13668 CVE-2026-16361 · GHSA-vmm5-fq3q-c8fc

Memory safety bugs fixed in Thunderbird ESR 140.13

MEDIUM 49

Memory safety bugs present in Thunderbird ESR 140.12.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00315 Published 2026-07-21 Partial fix · 115.38, 140.13 CWE-119

TI-2026-13667 CVE-2026-16360 · GHSA-496m-5cg2-hw82

Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153

MEDIUM 49

Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00468 Published 2026-07-21 Partial fix · 115.38, 140.13 +1 CWE-119

TI-2026-13663 CVE-2026-16356 · GHSA-97hw-vmr9-c44j

Use after free in Mozilla Firefox

MEDIUM 49

Sandbox escape due to use-after-free in the Disability Access APIs component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00394 Published 2026-07-21 Partial fix · 115.38, 140.13 +1 CWE-416

TI-2026-13662 CVE-2026-16355 · GHSA-vcc7-rj3q-v3r3

Type confusion in Mozilla Firefox

MEDIUM 49

JIT miscompilation in the JavaScript Engine: JIT component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00405 Published 2026-07-21 Partial fix · 115.38, 140.13 +1 CWE-843

TI-2026-13660 CVE-2026-16353 · GHSA-xj6v-33q6-wvxj

Use after free in Mozilla Firefox

MEDIUM 49

Invalid pointer in the DOM: Bindings (WebIDL) component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00517 Published 2026-07-21 Partial fix · 115.38, 140.13 +1 CWE-416

TI-2026-13659 CVE-2026-16352 · GHSA-cpfr-cvmp-53mx

Use after free in Mozilla Firefox

MEDIUM 49

Sandbox escape due to use-after-free in the Disability Access APIs component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00394 Published 2026-07-21 Partial fix · 115.38, 140.13 +1 CWE-416

TI-2026-13658 CVE-2026-16351 · GHSA-frvf-6637-jq2q

Use after free in Mozilla Firefox

MEDIUM 49

Sandbox escape due to use-after-free in the DOM: Navigation component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00394 Published 2026-07-21 Partial fix · 115.38, 140.13 +1 CWE-416

TI-2026-13657 CVE-2026-16350 · GHSA-rjxr-w76j-p937

Memory corruption in Mozilla Firefox

MEDIUM 49

Incorrect boundary conditions in the Audio/Video: cubeb component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00405 Published 2026-07-21 Partial fix · 115.38, 140.13 +1 CWE-119

TI-2026-13694 CVE-2026-16387 · GHSA-24w5-cqc3-h379

Information disclosure in Mozilla Firefox

MEDIUM 48

Site isolation issue in the Networking component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00204 Published 2026-07-21 Partial fix · 140.13, 153 CWE-200

TI-2026-13682 CVE-2026-16375 · GHSA-fg69-c79m-xpwv

Origin validation error in Mozilla Firefox

MEDIUM 48

Site isolation issue in the Networking: HTTP component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00209 Published 2026-07-21 Partial fix · 140.13, 153 CWE-346

TI-2026-13665 CVE-2026-16358 · GHSA-27g4-qfhf-pj24

Origin validation error in Mozilla Firefox

MEDIUM 48

Site isolation issue in the Graphics: WebRender component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00216 Published 2026-07-21 Partial fix · 115.38, 140.13 +1 CWE-346

TI-2026-13656 CVE-2026-16349 · GHSA-9cw3-v4hh-fhf9

Origin validation error in Mozilla Firefox

MEDIUM 48

Same-origin policy bypass in the DOM: Navigation component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00215 Published 2026-07-21 Partial fix · 115.38, 140.13 +1 CWE-346

TI-2026-13697 CVE-2026-16390 · GHSA-7rg2-8xrh-rwh8

Protection mechanism failure in Mozilla Firefox

MEDIUM 47

Mitigation bypass in the Enterprise Policies component.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00316 Published 2026-07-21 Partial fix · 140.13, 153 CWE-693

TI-2026-13666 CVE-2026-16359 · GHSA-jwqr-9422-w9p4

Memory corruption in Mozilla Firefox

MEDIUM 47

Incorrect boundary conditions in the Audio/Video: GMP component.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00263 Published 2026-07-21 Partial fix · 115.38, 140.13 +1 CWE-119

TI-2026-13688 CVE-2026-16381 · GHSA-pp6f-jf25-x95p

Origin validation error in Mozilla Firefox

MEDIUM 46

Same-origin policy bypass in the Networking: DNS component.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00173 Published 2026-07-21 Partial fix · 140.13, 153 CWE-346

TI-2026-13703 CVE-2026-16396 · GHSA-97fr-g29v-hhwf

Improper privilege management in Mozilla Firefox

MEDIUM 40

Privilege escalation in WebExtensions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00241 Published 2026-07-21 Partial fix · 140.13, 153 CWE-269

TI-2026-13686 CVE-2026-16379 · GHSA-wh9f-q55j-mp9r

Improper privilege management in Mozilla Firefox

MEDIUM 40

Privilege escalation in the DOM: Content Processes component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00278 Published 2026-07-21 Partial fix · 140.13, 153 CWE-269

TI-2026-13678 CVE-2026-16371 · GHSA-8rfc-phx9-6vc2

Improper privilege management in Mozilla Firefox

MEDIUM 40

Privilege escalation in the DOM: Navigation component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00297 Published 2026-07-21 Partial fix · 140.13, 140.15 +1 CWE-269

TI-2026-13669 CVE-2026-16362 · GHSA-4wj3-8493-w74m

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the WebRTC: Audio/Video component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00292 Published 2026-07-21 Partial fix · 140.13, 153 CWE-416

TI-2026-13698 CVE-2026-16391 · GHSA-jvcf-79h8-93pm

Information disclosure in Mozilla Firefox

LOW 39

Information disclosure in the Storage: IndexedDB component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00322 Published 2026-07-21 Partial fix · 140.13, 153 CWE-200

TI-2026-13681 CVE-2026-16374 · GHSA-gqm4-gr2q-ph9g

Information disclosure in Mozilla Firefox

LOW 39

Information disclosure in the Framework component in DevTools.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00322 Published 2026-07-21 Partial fix · 140.13, 153 CWE-200

TI-2026-13661 CVE-2026-16354 · GHSA-29g8-xp94-2r42

Information disclosure in Mozilla Firefox

LOW 39

Information disclosure in the Graphics: ImageLib component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00341 Published 2026-07-21 Partial fix · 115.38, 140.13 +1 CWE-200

TI-2026-13712 CVE-2026-16405 · GHSA-cjjv-h8qx-pq7p

Information disclosure in Mozilla Firefox

LOW 38

Information disclosure in the Networking: WebSockets component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00256 Published 2026-07-21 Partial fix · 140.13, 153 CWE-200

TI-2026-40573 CVE-2026-56208 · GHSA-mgv2-4j37-m3x6

Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

LOW 36

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00454 Published 2026-06-19 Partial fix · 140.13.0-1.el10_0, 140.13.0-1.el7_9 +57 CWE-122

TI-2026-13226 CVE-2026-15719 · GHSA-hqh9-m4jx-3x67

Site isolation issue in the DOM: Navigation component

LOW 24

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00339 Published 2026-07-14 Partial fix · 115.38, 140.13 +1

TI-2026-13225 CVE-2026-15718 · GHSA-6f82-p732-9cp8

Invalid pointer in the JavaScript: WebAssembly component

LOW 21

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00489 Published 2026-07-14 Partial fix · 140.13, 152.0.6 CWE-763