Threats Tagged 'cve-2025-4087'

Multiple security vulnerabilities affecting Mozilla Thunderbird have been addressed in a Red Hat security update for Red Hat Enterprise Linux 9.4 Extended Update Support. The issues include privilege escalation in the Firefox Updater, unsafe attribute access during XPath parsing, process isolation bypass via "javascript:" URI links in cross-origin frames, and several memory safety bugs. These vulnerabilities have been fixed in Thunderbird version 128.10 and related Firefox versions. The update is rated as important by Red Hat Product Security.

Multiple security vulnerabilities affecting Mozilla Thunderbird have been addressed in a Red Hat security update for Red Hat Enterprise Linux 9.2 Extended Update Support. The issues include privilege escalation in the Firefox Updater, unsafe attribute access during XPath parsing, process isolation bypass via "javascript:" URI links in cross-origin frames, and several memory safety bugs. These vulnerabilities have been fixed in Thunderbird version 128.10 and corresponding Firefox versions. The update is rated as Important by Red Hat Product Security.

Multiple security vulnerabilities affecting Mozilla Thunderbird have been addressed in a Red Hat security update for Red Hat Enterprise Linux 8.8 Extended Update Support. The issues include privilege escalation in the Firefox Updater, unsafe attribute access during XPath parsing, process isolation bypass via "javascript:" URI links in cross-origin frames, and several memory safety bugs. These vulnerabilities have been fixed in Thunderbird version 128.10 and corresponding Firefox versions.

Multiple security vulnerabilities affecting Mozilla Thunderbird have been addressed in a Red Hat security update for Red Hat Enterprise Linux 8.6. These include privilege escalation in the Firefox Updater, unsafe attribute access during XPath parsing, process isolation bypass via "javascript:" URI links in cross-origin frames, and several memory safety bugs. The update fixes these issues in Thunderbird version 128.10 and corresponding Firefox versions. The vulnerabilities have been rated with an overall security impact of Important by Red Hat.

Multiple security vulnerabilities affecting Mozilla Thunderbird have been addressed in a Red Hat security update. These include privilege escalation in the Firefox Updater, unsafe attribute access during XPath parsing, process isolation bypass via javascript: URI links in cross-origin frames, and several memory safety bugs. The update applies to Thunderbird versions integrated with Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions on various architectures. The vulnerabilities have been rated as important by Red Hat Product Security.

Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as packaged by Red Hat for Red Hat Enterprise Linux 8.4 variants. These include privilege escalation in the Firefox Updater, unsafe attribute access during XPath parsing, process isolation bypass via "javascript:" URI links in cross-origin frames, and several memory safety bugs. The fixes are included in Thunderbird version 128.10.0-1.el8_4 packages distributed by Red Hat. The update is rated as Important by Red Hat Product Security.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in a Red Hat Enterprise Linux 8.8 Extended Update Support release. These include privilege escalation in the Firefox Updater, unsafe attribute access during XPath parsing, process isolation bypass via "javascript:" URI links in cross-origin frames, and several memory safety bugs. The update fixes these issues in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10. The vulnerabilities have been rated as important by Red Hat Product Security.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 8.6 updates. These include privilege escalation in the Firefox Updater, unsafe attribute access during XPath parsing, process isolation bypass via "javascript:" URI links in cross-origin frames, and several memory safety bugs. The fixes are included in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 packages provided by Red Hat. The update is rated as Important by Red Hat Product Security.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in a Red Hat security update for Red Hat Enterprise Linux 8.2. These include privilege escalation in the Firefox Updater, unsafe attribute access during XPath parsing, process isolation bypass via "javascript:" URI links in cross-origin frames, and several memory safety bugs. The update fixes these issues in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10. Red Hat has rated the security impact as Important and recommends applying the update to affected systems.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in a Red Hat security update. These include privilege escalation in the Firefox Updater, unsafe attribute access during XPath parsing, process isolation bypass via "javascript:" URI links in cross-origin frames, and several memory safety bugs. The fixes are included in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 packages for Red Hat Enterprise Linux 8.4 variants. The update is rated as important by Red Hat Product Security.