This Red Hat security advisory addresses multiple vulnerabilities in Mozilla Thunderbird and related Firefox components. The update fixes a range of issues including heap buffer overflow, use-after-free, integer overflows, sandbox escapes, privilege escalations, information disclosure, mitigation bypasses, and same-origin policy bypasses. These vulnerabilities affect various components such as the JavaScript engine, DOM, Audio/Video, Graphics, Networking, and Storage subsystems. The fixes are included in Thunderbird ESR 140.8 and Thunderbird 148 releases. The advisory rates the security impact as Important (high severity).

Red Hat Security Advisory: thunderbird security update

A security update for Mozilla Thunderbird addresses multiple vulnerabilities including heap buffer overflow, use-after-free, integer overflows, sandbox escapes, privilege escalations, information disclosure, and mitigation bypasses. These issues affect various components such as the JavaScript engine, DOM, audio/video processing, graphics, networking, and storage subsystems. The update fixes these vulnerabilities in Thunderbird ESR 140.8 and Thunderbird 148, among other related Firefox ESR and Firefox versions.

Multiple security vulnerabilities affecting Mozilla Thunderbird and related Firefox components have been addressed in a Red Hat security advisory. These include heap buffer overflows, use-after-free bugs, integer overflows, sandbox escapes, privilege escalations, mitigation bypasses, and information disclosure issues. The fixes are included in updated versions of Thunderbird ESR 140.8, Firefox ESR 115.33, Firefox ESR 140.8, Firefox 148, and Thunderbird 148. The advisory covers a broad range of components such as the JavaScript engine, DOM, audio/video, graphics, networking, and storage subsystems.

Multiple security vulnerabilities have been addressed in Mozilla Thunderbird and related Firefox components, including heap buffer overflows, use-after-free bugs, integer overflows, sandbox escapes, privilege escalations, and mitigation bypasses. These issues affect various components such as the JavaScript engine, DOM, Audio/Video, Graphics, Networking, and Storage subsystems. The update fixes these vulnerabilities in Thunderbird ESR 140.8, Thunderbird 148, Firefox ESR 115.33, Firefox ESR 140.8, and Firefox 148. Red Hat has released security updates for Thunderbird on Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions to remediate these issues.

A heap buffer overflow vulnerability (CVE-2026-2447) was discovered in the libvpx package, which provides the VP8 SDK used for encoding and decoding the VP8 video codec. This vulnerability affects Red Hat Enterprise Linux 8 and related products. Red Hat has released an important security update to address this issue. The vulnerability could potentially lead to memory corruption, but no public exploit or exploitation in the wild has been reported.

Red Hat Security Advisory: libvpx security update

A security update for Mozilla Thunderbird and related Firefox components addresses multiple vulnerabilities including heap buffer overflows, use-after-free bugs, integer overflows, sandbox escapes, privilege escalations, information disclosures, and mitigation bypasses. These issues affect various components such as the JavaScript engine, DOM, Audio/Video, Networking, Graphics, and Storage. The update is rated as important by Red Hat and fixes these vulnerabilities in Thunderbird ESR 140.8, Firefox ESR 140.8, Firefox 148, and Thunderbird 148.

This Red Hat security advisory addresses multiple vulnerabilities in Mozilla Thunderbird and related Firefox components. The update fixes numerous memory safety issues, use-after-free bugs, integer overflows, sandbox escapes, privilege escalations, and mitigation bypasses across various components including the JavaScript engine, DOM, Audio/Video, Graphics, Networking, and Storage. The fixes are included in Thunderbird ESR 140.8, Firefox ESR 115.33, Firefox ESR 140.8, Firefox 148, and Thunderbird 148. The advisory is rated as having an important security impact.

Multiple security vulnerabilities affecting Mozilla Thunderbird and Firefox components have been addressed in a Red Hat security advisory. These include heap buffer overflows, use-after-free bugs, integer overflows, sandbox escapes, privilege escalations, information disclosure, mitigation bypasses, and same-origin policy bypasses. The fixes are included in updated versions of Thunderbird ESR 140.8, Firefox ESR 115.33, Firefox ESR 140.8, Firefox 148, and Thunderbird 148. The advisory covers a broad range of components such as the JavaScript engine, DOM, Audio/Video, Graphics, Networking, and Storage subsystems.

Multiple security vulnerabilities have been identified and fixed in Mozilla Firefox and related components, including Firefox ESR and Thunderbird. These include heap buffer overflows, use-after-free bugs, integer overflows, sandbox escapes, privilege escalations, information disclosures, mitigation bypasses, and same-origin policy bypasses. The fixes are included in Firefox ESR 115.33, Firefox ESR 140.8, Firefox 148, Thunderbird ESR 140.8, and Thunderbird 148. Red Hat has released security updates for Firefox in Red Hat Enterprise Linux 9.4 Extended Update Support and related variants.

Red Hat Security Advisory: firefox security update

Multiple security vulnerabilities affecting Mozilla Firefox and related components have been addressed in a Red Hat security update for Firefox on Red Hat Enterprise Linux 9.6 Extended Update Support. These include heap buffer overflows, use-after-free bugs, integer overflows, sandbox escapes, privilege escalations, information disclosures, mitigation bypasses, and same-origin policy bypasses across various Firefox components such as the JavaScript engine, DOM, Audio/Video, Networking, Graphics, and Storage. The update fixes these issues in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148, and Thunderbird 148. The update is rated as having an important security impact by Red Hat Product Security.

Multiple security vulnerabilities affecting Mozilla Firefox and related components have been addressed in a Red Hat security update. These include heap buffer overflows, use-after-free bugs, integer overflows, sandbox escapes, privilege escalations, mitigation bypasses, and information disclosure issues across various Firefox components such as the JavaScript engine, DOM, Audio/Video, Graphics, Networking, and Storage. The update fixes these issues in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148, and Thunderbird 148. Red Hat has rated the update as important and provides patches for Red Hat Enterprise Linux 8.6 variants. For detailed impact and CVSS scores, refer to the individual CVE pages.

Multiple security vulnerabilities have been addressed in Mozilla Firefox and related components, including heap buffer overflows, use-after-free bugs, integer overflows, sandbox escapes, privilege escalations, mitigation bypasses, and information disclosures. These issues affect various Firefox components such as the JavaScript engine, DOM, Audio/Video, Graphics, Networking, and Storage. The fixes are included in Firefox ESR 115.33, Firefox ESR 140.8, Firefox 148, Thunderbird ESR 140.8, and Thunderbird 148. Red Hat has released security updates for Firefox in Red Hat Enterprise Linux 8.8 variants to address these vulnerabilities.

Multiple security vulnerabilities have been identified and fixed in Mozilla Firefox and related components, including memory safety bugs, use-after-free errors, integer overflows, sandbox escapes, privilege escalations, and mitigation bypasses. These issues affect various Firefox components such as the JavaScript engine, DOM, Audio/Video, Graphics, Networking, and Storage. The fixes are included in Firefox ESR 115.33, Firefox ESR 140.8, Firefox 148, Thunderbird ESR 140.8, and Thunderbird 148, and corresponding updates for Red Hat Enterprise Linux 9.0. The vulnerabilities have been rated as having an important security impact by Red Hat.

A security update for Mozilla Firefox addresses multiple vulnerabilities including heap buffer overflow, use-after-free, integer overflows, sandbox escapes, privilege escalations, information disclosure, mitigation bypasses, and same-origin policy bypasses. These issues affect various Firefox components such as the JavaScript engine, DOM, Audio/Video, Graphics, Networking, and Messaging System. The fixes are included in Firefox ESR 115.33, ESR 140.8, Firefox 148, Thunderbird ESR 140.8, and Thunderbird 148. The update is rated as important by Red Hat Product Security.

Multiple security vulnerabilities affecting Mozilla Firefox and related components have been addressed in a Red Hat security update. These include heap buffer overflows, use-after-free conditions, integer overflows, sandbox escapes, privilege escalations, mitigation bypasses, information disclosure, and same-origin policy bypasses. The fixes apply to Firefox ESR 115.33, ESR 140.8, Firefox 148, Thunderbird ESR 140.8, and Thunderbird 148. The update is rated as important by Red Hat Product Security.

Multiple security vulnerabilities have been addressed in Mozilla Firefox and related components, including heap buffer overflows, use-after-free bugs, integer overflows, sandbox escapes, privilege escalations, and mitigation bypasses. These issues affect various Firefox components such as the JavaScript engine, DOM, Audio/Video, Graphics, Networking, and Storage. The fixes are included in Firefox ESR 115.33, Firefox ESR 140.8, Firefox 148, Thunderbird ESR 140.8, and Thunderbird 148. Red Hat has released an important security update for Firefox on Red Hat Enterprise Linux 10 to address these vulnerabilities.

Multiple security vulnerabilities have been identified and fixed in Mozilla Firefox and related components, including memory safety bugs, use-after-free errors, integer overflows, sandbox escapes, privilege escalations, and mitigation bypasses. These issues affect Firefox ESR, Thunderbird, and standard Firefox releases. The update addresses a broad range of flaws across various components such as the JavaScript engine, DOM, Audio/Video, Graphics, Networking, and Storage. Red Hat has released security updates for Firefox in Red Hat Enterprise Linux 9 to remediate these vulnerabilities.

A Red Hat security advisory addresses multiple vulnerabilities in Mozilla Firefox and related components, including use-after-free, integer overflows, sandbox escapes, privilege escalations, mitigation bypasses, and memory safety bugs. These issues affect Firefox ESR, Thunderbird ESR, and standard Firefox releases. The update fixes these vulnerabilities to improve security and stability.

libvpx

thunderbird

CVE-2026-2447 is a heap buffer overflow vulnerability in the libvpx library. This flaw affects multiple versions of libvpx and was addressed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2. The vulnerability has a high severity rating with a CVSS score of 8.8. It allows for potential high-impact compromise including confidentiality, integrity, and availability. Fixes have been released by Mozilla and Ubuntu for affected products.

Heap buffer overflow in libvpx. (CVE-2026-2447)

Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.

Search: CVE-2026-2447