Red Hat has released a security advisory (RHSA-2025:17345) addressing multiple vulnerabilities in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 9.2. The vulnerabilities include sandbox escapes caused by use-after-free and invalid pointer issues in the Graphics Canvas2D component (CVE-2025-10527, CVE-2025-10528), a same-origin policy bypass in the Layout component (CVE-2025-10529), incorrect boundary conditions in the JavaScript garbage collector component (CVE-2025-10532), memory safety bugs fixed in Thunderbird ESR 140.3 (CVE-2025-10537), information disclosure in the Networking Cache component (CVE-2025-10536), and an integer overflow in the SVG component (CVE-2025-10533). These issues have been resolved in Thunderbird version 140.3.0-1.el9_2 and corresponding Firefox ESR updates. The advisory provides links to the fixes and additional details.

The vulnerabilities collectively could allow attackers to escape the sandbox environment, bypass same-origin policy protections, cause memory corruption, disclose sensitive information, and trigger integer overflows within Thunderbird. These issues pose a high security risk by potentially enabling remote code execution or unauthorized data access if exploited. The update mitigates these risks by fixing the underlying bugs in the affected components.

Red Hat has released an official security update for Thunderbird (version 140.3.0-1.el9_2) that addresses all listed vulnerabilities. Users of Red Hat Enterprise Linux 9.2 should apply this update promptly by following the instructions in the Red Hat advisory (https://access.redhat.com/articles/11258). No additional mitigation steps are indicated beyond applying the provided patch.