Threats Tagged 'cve-2026-84145'

This Red Hat security advisory addresses a high-severity vulnerability identified as CVE-2026-16365 affecting Thunderbird. The advisory provides a functional equivalent update to a previous Red Hat advisory (RHSA-2026:73971). The vulnerability involves multiple weaknesses related to authorization and memory safety as indicated by associated CWEs. Affected versions include various Thunderbird and Firefox packages on Red Hat Enterprise Linux and SUSE Linux Enterprise distributions. No CVSS score is provided for this vulnerability.

Multiple security vulnerabilities have been fixed in Mozilla Firefox Extended Support Release 153.2.0 ESR, including sandbox escapes, use-after-free bugs, privilege escalations, information disclosures, site isolation issues, spoofing, clickjacking, and integer overflows across various components such as Remote Settings Client, JavaScript engine, DOM, Graphics, Networking, and Application Update. These issues are addressed in Firefox 154 and Firefox ESR 153.2. The vulnerabilities range in impact from moderate to high severity.

These are all security issues fixed in the MozillaFirefox-155.0-1.1 package on the GA media of openSUSE Tumbleweed.

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.