Red Hat Security Advisory: thunderbird security update
Multiple security vulnerabilities affecting Mozilla Thunderbird have been addressed in a Red Hat security update. These include privilege escalation in the Firefox Updater, unsafe attribute access during XPath parsing, process isolation bypass via javascript: URI links in cross-origin frames, and several memory safety bugs. The update applies to Thunderbird versions integrated with Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions on various architectures. The vulnerabilities have been rated as important by Red Hat Product Security.
AI Analysis
Technical Summary
This advisory covers five security vulnerabilities in Mozilla Thunderbird as packaged by Red Hat. The issues include CVE-2025-2817 (privilege escalation in Firefox Updater), CVE-2025-4087 (unsafe attribute access during XPath parsing), CVE-2025-4083 (process isolation bypass via javascript: URI links in cross-origin frames), and two memory safety bugs (CVE-2025-4091 and CVE-2025-4093) fixed in Thunderbird 138 and Thunderbird 128.10 ESR versions. These vulnerabilities affect Thunderbird as distributed in Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions across multiple CPU architectures (ppc64le, x86_64, aarch64, s390x). The update to Thunderbird version 128.10.0-1.el9_0 addresses these issues.
Potential Impact
The vulnerabilities include privilege escalation, unsafe attribute access, process isolation bypass, and memory safety bugs, which could potentially allow attackers to escalate privileges, bypass security restrictions, or cause memory corruption. Red Hat rates the overall security impact as Important (high severity). No known exploits in the wild have been reported at this time.
Mitigation Recommendations
A security update to Thunderbird version 128.10.0-1.el9_0 is available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions on supported architectures. Users should apply this update promptly to remediate the listed vulnerabilities. For detailed update instructions, refer to the Red Hat advisory at https://access.redhat.com/articles/11258. No additional mitigations beyond applying the official update are specified.
Red Hat Security Advisory: thunderbird security update
Description
Multiple security vulnerabilities affecting Mozilla Thunderbird have been addressed in a Red Hat security update. These include privilege escalation in the Firefox Updater, unsafe attribute access during XPath parsing, process isolation bypass via javascript: URI links in cross-origin frames, and several memory safety bugs. The update applies to Thunderbird versions integrated with Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions on various architectures. The vulnerabilities have been rated as important by Red Hat Product Security.
Affected software
pkg:rpm/redhat/thunderbirdRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers five security vulnerabilities in Mozilla Thunderbird as packaged by Red Hat. The issues include CVE-2025-2817 (privilege escalation in Firefox Updater), CVE-2025-4087 (unsafe attribute access during XPath parsing), CVE-2025-4083 (process isolation bypass via javascript: URI links in cross-origin frames), and two memory safety bugs (CVE-2025-4091 and CVE-2025-4093) fixed in Thunderbird 138 and Thunderbird 128.10 ESR versions. These vulnerabilities affect Thunderbird as distributed in Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions across multiple CPU architectures (ppc64le, x86_64, aarch64, s390x). The update to Thunderbird version 128.10.0-1.el9_0 addresses these issues.
Potential Impact
The vulnerabilities include privilege escalation, unsafe attribute access, process isolation bypass, and memory safety bugs, which could potentially allow attackers to escalate privileges, bypass security restrictions, or cause memory corruption. Red Hat rates the overall security impact as Important (high severity). No known exploits in the wild have been reported at this time.
Mitigation Recommendations
A security update to Thunderbird version 128.10.0-1.el9_0 is available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions on supported architectures. Users should apply this update promptly to remediate the listed vulnerabilities. For detailed update instructions, refer to the Red Hat advisory at https://access.redhat.com/articles/11258. No additional mitigations beyond applying the official update are specified.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:7692
- Cve Count
- 5
- Additional Cves
- ["CVE-2025-4083","CVE-2025-4087","CVE-2025-4091","CVE-2025-4093"]
Threat ID: 6a4049e727e9c79719834c2b
Added to database: 06/27/2026, 22:08:39 UTC
Last enriched: 06/27/2026, 22:35:49 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 22
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.