CVE-2026-109776 Race condition in the XPCOM component

Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

EUVD-2026-98536

Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109776

A race condition exists in the XPCOM component affecting Mozilla Firefox , Firefox ESR , and Thunderbird . This vulnerability (CWE-366) was addressed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. In Debian-based systems, the issue is resolved in firefox-esr version 15...

CVE-2026-109776: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

PT-2026-111496

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description A race condition exists in the XPCOM component. A race condition is a situation where the...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the XPCOM component...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the XPCOM component...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the XPCOM component...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the XPCOM component...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the XPCOM component...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2026_6917)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266917 advisory. firefox: thunderbird: Use-after-free in the JavaScript Engine component CVE-2026-4701 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34,...

AlmaLinux 9.2 [TuxCare] Security Update: thunderbird Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1783601793)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783601793 advisory. - Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33...

Rocky Linux 10.1 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2026_6342)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266342 advisory. firefox: thunderbird: Use-after-free in the JavaScript Engine component CVE-2026-4701 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR...

Linux Distros Unpatched Vulnerability : CVE-2026-100819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird...

Mozilla Thunderbird < 153.4

The version of Thunderbird installed on the remote Windows host is prior to 153.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-103 advisory. - Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firef...

Mozilla Thunderbird < 157.0

The version of Thunderbird installed on the remote Windows host is prior to 157.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-101 advisory. - Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153....

Mozilla Thunderbird < 153.4

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 153.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-103 advisory. - Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixe...

Mozilla Thunderbird < 157.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 157.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-101 advisory. - Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefo...

SUSE CVE-2026-100819

Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

DEBIAN-CVE-2026-100819

Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...