CVE-2026-118178

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription URL to a file: URL. Thunderbird then read that location o...

RLSA-2026:93443 Important: thunderbird security, bug fix, and enhancement update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: Mitigation bypass in the Enterprise Policies component CVE-2026-109764 firefox: Spoofing issue in the DOM: Web Serial component CVE-2026-109770...

thunderbird security, bug fix, and enhancement update

An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

CVE-2026-118026

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the JavaScript: GC component...

CVE-2026-118025

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Other issue in the SVG component...

CVE-2026-118024

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Text component...

CVE-2026-118020

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout component...

CVE-2026-118019

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Race condition, use-after-free in the DOM: File component...

CVE-2026-118017

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the SVG component Mitigation --- CME Mitigation Guidance 2026-11-03 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the...

CVE-2026-118016

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component Mitigation --- CME Mitigation Guidance 2026-11-03 --- Disclaimer: The following mitigation solutions are provided as a courtesy,...

CVE-2026-118014

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript Engine: JIT component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a...

CVE-2026-118013

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Images, Video, and HTML Frames component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are...

CVE-2026-118012

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Animation component Mitigation --- CME Mitigation Guidance 2026-11-03 --- Disclaimer: The following mitigation solutions are provided as a courtesy,...

CVE-2026-118010

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Disability Access APIs component Mitigation --- CME Mitigation Guidance 2026-11-03 --- Disclaimer: The following mitigation solutions are provided as a...

CVE-2026-118011

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Frame poisoning in the CSS Parsing and Computation component Mitigation --- CME Mitigation Guidance 2026-11-03 --- Disclaimer: The following mitigation solutions are provided as ...

CVE-2026-118009

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow, use-after-free in the Graphics: Text component Mitigation --- CME Mitigation Guidance 2026-11-03 --- Disclaimer: The following mitigation solutions are provided...

CVE-2026-118008

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a...

CVE-2026-118007

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a courtesy,...

firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Widget: Gtk component...

firefox: thunderbird: Site isolation issue in the Panning and Zooming component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Panning and Zooming component...