RHSA-2026:1320

security update for thunderbird

view advisory published 2026-01-27

security update for thunderbird

describes (13)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-0891US	—	0.47% (41st)	—	2026-01-13
Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that…
CVE-2026-0890US	—	0.30% (23rd)	—	2026-01-13
Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0887US	—	0.33% (26th)	—	2026-01-13
Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0886US	—	0.38% (32nd)	—	2026-01-13
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0885US	—	0.40% (34th)	—	2026-01-13
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0884US	—	0.46% (40th)	—	2026-01-13
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0883US	—	0.36% (29th)	—	2026-01-13
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0882US	—	0.46% (40th)	—	2026-01-13
Use-after-free in the IPC component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0880US	—	0.54% (45th)	—	2026-01-13
Sandbox escape due to integer overflow in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbi…
CVE-2026-0879US	—	0.50% (43rd)	—	2026-01-13
Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147,…
CVE-2026-0878US	—	0.47% (40th)	—	2026-01-13
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thu…
CVE-2026-0877US	—	0.47% (41st)	—	2026-01-13
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2025-14327US	high7.5	0.38% (32nd)	—	2025-12-09
Spoofing issue in the Downloads Panel component. This vulnerability was fixed in Firefox 146, Thunderbird 146, Firefox ESR 140.7, and Thunderbird 140.7.

references

External citations — patches, advisories, analysis.

remediations (13)

Fixedthunderbird-0:140.7.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedthunderbird-0:140.7.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedthunderbird-0:140.7.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedthunderbird-0:140.7.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedthunderbird-0:140.7.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedthunderbird-0:140.7.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedthunderbird-0:140.7.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedthunderbird-0:140.7.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedthunderbird-0:140.7.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedthunderbird-0:140.7.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedthunderbird-0:140.7.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedthunderbird-0:140.7.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedthunderbird-0:140.7.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan