This advisory covers multiple security fixes for Mozilla Thunderbird as packaged in Red Hat Enterprise Linux 8.6. The vulnerabilities include sandbox escapes caused by use-after-free and invalid pointer dereferences in the Graphics Canvas2D component (CVE-2025-10527, CVE-2025-10528), a same-origin policy bypass in the Layout component (CVE-2025-10529), memory safety bugs fixed in Thunderbird ESR 140.3 and Thunderbird 143 (CVE-2025-10537), information disclosure in the Networking Cache component (CVE-2025-10536), integer overflow in the SVG component (CVE-2025-10533), and incorrect boundary conditions in the JavaScript GC component (CVE-2025-10532). These issues could allow sandbox escapes, policy bypasses, information leaks, and memory corruption. Red Hat has released patched versions (Thunderbird 140.3.0) to address these vulnerabilities.

The vulnerabilities collectively pose a high security risk, including potential sandbox escapes which could allow attackers to break out of restricted execution environments, bypass same-origin policy protections, cause information disclosure, and trigger memory safety issues such as use-after-free and integer overflow. These could lead to unauthorized code execution or data leakage within the context of the Thunderbird mail client. No known exploits in the wild have been reported at this time.

A security update for Thunderbird is available from Red Hat for Red Hat Enterprise Linux 8.6 variants. Users should apply the Thunderbird update to version 140.3.0 or later as provided by Red Hat to remediate these vulnerabilities. For detailed update instructions, refer to the Red Hat advisory RHSA-2025:17342 and the article at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patch.