PT-2026-102585

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Firefox ESR versions prior to 140.17 Thunderbird versions prior to 157 Description A use-after-free issue exists in the DOM: Core & HTML component, which can lead to a sandbox...

PT-2026-102589

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A use-after-free issue exists in the CSS Parsing and Computation component. Use-after-free is a memory corruption flaw that occurs...

PT-2026-102590

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A site isolation issue exists within the DOM: Networking component. Site isolation is a security mechanism that ensures web pages...

PT-2026-102592

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Firefox ESR versions prior to 140.17 Thunderbird versions prior to 157 Description A use-after-free issue exists in the Widget: Gtk component, which can lead to a sandbox escape...

PT-2026-102596

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A spoofing issue exists within the Networking: HTTP component. Recommendations Update Firefox to version 157. Update Firefox ESR to...

PT-2026-102598

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description Privilege escalation exists in the Places component. Recommendations Update Firefox to version 157. Update Firefox ESR to version...

PT-2026-102603

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A mitigation bypass exists within the DOM Navigation component. Recommendations Update Firefox to version 157. Update Firefox ESR t...

PT-2026-102534

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Firefox versions prior to 157 Description A sandbox escape exists within the Security: Process Sandboxing component. A sandbox is a security mechanism used to execute...

PT-2026-102550

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Firefox ESR versions prior to 140.17 Thunderbird versions prior to 157 Description A use-after-free issue exists in the JavaScript: WebAssembly component. Use-after-free is a...

PT-2026-102553

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A use-after-free issue exists in the XSLT component...

PT-2026-102555

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A sandbox escape exists in the Graphics: WebRender...

PT-2026-102565

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A use-after-free issue exists within the DOM: Core & HTML...

PT-2026-102566

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Firefox ESR versions prior to 140.17 Thunderbird versions prior to 157 Description JIT miscompilation occurs in the JavaScript: WebAssembly component. JIT Just-In-Time compilati...

PT-2026-102568

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Firefox ESR versions prior to 140.17 Thunderbird versions prior to 157 Description An issue exists in the Internationalization component where incorrect boundary conditions allo...

PT-2026-102570

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Thunderbird versions prior to 157 Description A use-after-free issue exists in the JavaScript: WebAssembly component. Use-after-free is a memory corruption flaw that occurs when an application continues to use a...

PT-2026-102591

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 157 Firefox versions prior to 157 Description An issue exists within the JavaScript: WebAssembly component. WebAssembly is a binary instruction format for a stack-based virtual machine, designed as a portable...

PT-2026-102599

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A use-after-free issue exists within the JIT Just-In-Time component of the JavaScript Engine. A use-after-free occurs when an...

PT-2026-102602

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A mitigation bypass exists within the DOM Security component. Recommendations Update Firefox to version 157. Update Firefox ESR to...

KLA91302 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...

MiracleLinux 8 : firefox-140.15.0-1.el8_10.ML.1 (AXSA:2026-1932:24)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1932:24 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings...