Threat Intelligence Database

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.10.0 ESR. - MFSA 2026-32 (bsc#1262230): * CVE-2026-6746: Use-after-free in the DOM: Core & HTML component * CVE-2026-6747: Use-after-free in the WebRTC component * CVE-2026-6748: Uninitialized memory in the Audio/Video: Web Codecs component * CVE-2026-6749: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component * CVE-2026-6750: Privilege escalation in the Graphics: WebRender component * CVE-2026-6751: Uninitialized memory in the Audio/Video: Web Codecs component * CVE-2026-6752: Incorrect boundary conditions in the WebRTC component * CVE-2026-6753: Incorrect boundary conditions in the WebRTC component * CVE-2026-6754: Use-after-free in the JavaScript Engine component * CVE-2026-6757: Invalid pointer in the JavaScript: WebAssembly component * CVE-2026-6759: Use-after-free in the Widget: Cocoa component * CVE-2026-6761: Privilege escalation in the Networking component * CVE-2026-6762: Spoofing issue in the DOM: Core & HTML component * CVE-2026-6763: Mitigation bypass in the File Handling component * CVE-2026-6764: Incorrect boundary conditions in the DOM: Device Interfaces component * CVE-2026-6765: Information disclosure in the Form Autofill component * CVE-2026-6766: Incorrect boundary conditions in the Libraries component in NSS * CVE-2026-6767: Other issue in the Libraries component in NSS * CVE-2026-6769: Privilege escalation in the Debugger component * CVE-2026-6770: Other issue in the Storage: IndexedDB component * CVE-2026-6771: Mitigation bypass in the DOM: Security component * CVE-2026-6772: Incorrect boundary conditions in the Libraries component in NSS * CVE-2026-6776: Incorrect boundary conditions in the WebRTC: Networking component * CVE-2026-6785: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 * CVE-2026-6786: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5734) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5731) * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component (CVE-2026-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5734) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5731) * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component (CVE-2026-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5734) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5731) * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component (CVE-2026-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.10.1 ESR. - MFSA 2026-36 (bsc#1263110) * CVE-2026-7320: Information disclosure due to incorrect boundary conditions in the Audio/Video component. * CVE-2026-7321: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. * CVE-2026-7322: Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1 * CVE-2026-7323: Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5734) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5731) * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component (CVE-2026-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: - Mozilla Thunderbird 140.6.0 ESR MFSA 2025-96 (bsc#1254551) * CVE-2025-14321 (bmo#1992760) Use-after-free in the WebRTC: Signaling component * CVE-2025-14322 (bmo#1996473) Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component * CVE-2025-14323 (bmo#1996555) Privilege escalation in the DOM: Notifications component * CVE-2025-14324 (bmo#1996840) JIT miscompilation in the JavaScript Engine: JIT component * CVE-2025-14325 (bmo#1998050) JIT miscompilation in the JavaScript Engine: JIT component * CVE-2025-14328 (bmo#1996761) Privilege escalation in the Netmonitor component * CVE-2025-14329 (bmo#1997018) Privilege escalation in the Netmonitor component * CVE-2025-14330 (bmo#1997503) JIT miscompilation in the JavaScript Engine: JIT component * CVE-2025-14331 (bmo#2000218) Same-origin policy bypass in the Request Handling component * CVE-2025-14333 (bmo#1966501, bmo#1997639) Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146

Multiple security vulnerabilities affecting Mozilla Thunderbird have been addressed in a Red Hat security update for Red Hat Enterprise Linux 10.0 Extended Update Support. The update fixes memory safety bugs, use-after-free, JIT miscompilation, sandbox escape, privilege escalation, and same-origin policy bypass issues across various components such as WebRTC, JavaScript engine, graphics, netmonitor, request handling, and DOM notifications. These vulnerabilities are rated as having important security impact by Red Hat. The update is available as Thunderbird ESR 140.6 and Thunderbird 146 packages for multiple architectures.

Multiple security vulnerabilities affecting Mozilla Thunderbird have been addressed in a Red Hat security update. These include memory safety bugs, use-after-free, JIT miscompilation, sandbox escape, privilege escalation, and same-origin policy bypass issues. The update is rated as important by Red Hat and applies to Thunderbird ESR 140.6 and Thunderbird 146 versions. The advisory covers Red Hat Enterprise Linux 8.8 variants. No known exploits in the wild have been reported at this time.

Multiple security vulnerabilities affecting Mozilla Thunderbird have been addressed in a Red Hat security update. These include memory safety bugs, use-after-free, JIT miscompilation, sandbox escape, privilege escalation, and same-origin policy bypass issues. The update is rated as important by Red Hat Product Security and applies to Thunderbird ESR 140.6 and Thunderbird 146 versions. The vulnerabilities impact various components such as WebRTC signaling, JavaScript engine, graphics CanvasWebGL, Netmonitor, request handling, and DOM notifications. Red Hat has released updated packages for Red Hat Enterprise Linux 8 and its extended life cycle variants to remediate these issues.