Threats Tagged 'cve-2026-84122'

This Red Hat security advisory addresses a high-severity vulnerability identified as CVE-2026-16365 affecting Thunderbird. The advisory provides a functional equivalent update to a previous Red Hat advisory (RHSA-2026:73971). The vulnerability involves multiple weaknesses related to authorization and memory safety as indicated by associated CWEs. Affected versions include various Thunderbird and Firefox packages on Red Hat Enterprise Linux and SUSE Linux Enterprise distributions. No CVSS score is provided for this vulnerability.

Multiple security vulnerabilities have been fixed in Mozilla Firefox Extended Support Release 153.2.0 ESR, including sandbox escapes, use-after-free bugs, privilege escalations, information disclosures, site isolation issues, spoofing, clickjacking, and integer overflows across various components such as Remote Settings Client, JavaScript engine, DOM, Graphics, Networking, and Application Update. These issues are addressed in Firefox 154 and Firefox ESR 153.2. The vulnerabilities range in impact from moderate to high severity.

These are all security issues fixed in the MozillaFirefox-155.0-1.1 package on the GA media of openSUSE Tumbleweed.

CVE-2026-84122 is a use-after-free vulnerability in the Audio/Video component of Firefox. This security flaw was addressed and fixed in Firefox 155, Firefox ESR 140.15, and Firefox ESR 153.2. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a medium severity level. It requires user interaction but no privileges and can lead to limited confidentiality and integrity impacts without affecting availability. There are no known exploits in the wild. The vendor advisory confirms the fix is available in the stated versions.

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.