Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component CVE-2026-100832 firefox:...

PT-2026-127304

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in WTF, which can allow a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use afte...

Security Vulnerabilities fixed in Firefox 159 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation component Reporter satyamasd...

Stable Channel Update for Desktop

The Stable channel has been updated to 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

PT-2026-126589

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159...

PT-2026-126499

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird ESR versions prior to 153.6 Description A use-after-free issue exists in the XSLT component. Use-after-free is a memory corruption...

PT-2026-126519

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTM...

PT-2026-126594

Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159...

PT-2026-126601

Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159...

PT-2026-126530

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird ESR versions prior to 153.6 Description A use-after-free issue exists in the XML component. Use-after-free is a memory corruption...

PT-2026-126563

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird ESR versions prior to 153.6 Description A use-after-free issue exists in the Graphics component. Use-after-free is a memory...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues in Turbolev, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

PT-2026-126514

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists in the DOM: Events component...

chromium -- security fixes

Chrome Releases reports: This update includes 52 security fixes: 571156746 Critical CVE-2026-118306: Memory corruption in FileSystem. 572193211 Critical CVE-2026-118331: Improper input validation in FileAPI. 574776938 Critical CVE-2026-118348: Improper input validation in Skia. 574852698 Critical...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from a use-after-free issue in the JIT component of the JavaScript Engine...

RockyLinux 8 : xorg-x11-server (RLSA-2026:89747)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89747 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146141)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146141 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146346)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146346 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nfflowtableiterate only treats...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146313)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146313 advisory. In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer an...

kernel security, bug fix, and enhancement update

5.14.0-687.61.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...