This Red Hat security advisory addresses several vulnerabilities in Mozilla Thunderbird, including sandbox escapes caused by use-after-free and invalid pointer issues in the Graphics Canvas2D component (CVE-2025-10527, CVE-2025-10528), a same-origin policy bypass in the Layout component (CVE-2025-10529), incorrect boundary conditions in the JavaScript garbage collector (CVE-2025-10532), integer overflow in the SVG component (CVE-2025-10533), information disclosure in the Networking Cache component (CVE-2025-10536), and memory safety bugs fixed in Thunderbird ESR 140.3 (CVE-2025-10537). These vulnerabilities could potentially allow sandbox escapes, information disclosure, and other security issues. The advisory covers fixes applied in Thunderbird ESR 140.3 and Firefox ESR 140.3 and later.

The vulnerabilities collectively pose a high security impact, including the risk of sandbox escapes which could allow attackers to break out of restricted execution environments, information disclosure through networking cache flaws, bypass of same-origin policy protections, and memory safety issues that could lead to crashes or code execution. These issues affect Thunderbird versions prior to 140.3 on Red Hat Enterprise Linux 9. No known exploits in the wild have been reported at the time of this advisory.

A security update is available and should be applied to affected systems. Red Hat has released Thunderbird ESR 140.3 packages that address these vulnerabilities. Users should update to Thunderbird ESR 140.3 or later as provided by Red Hat Enterprise Linux 9 updates. For detailed update instructions, refer to the Red Hat advisory at https://access.redhat.com/articles/11258. No additional mitigations are indicated beyond applying the official update.