RHSA-2026:0025

security update for thunderbird

Advisory ansehen veröffentlicht 2026-01-05

security update for thunderbird

beschreibt (10)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-14333US	high8.1	0.44% (37th)	—	2025-12-09
Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that…
CVE-2025-14331US	medium6.5	0.19% (8th)	—	2025-12-09
Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 14…
CVE-2025-14330US	critical9.8	0.51% (42nd)	—	2025-12-09
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14329US	—	0.40% (33rd)	—	2025-12-09
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14328US	—	0.40% (33rd)	—	2025-12-09
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14325US	—	0.34% (26th)	Exploit	2025-12-09
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14324US	critical9.8	0.56% (46th)	—	2025-12-09
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140…
CVE-2025-14323US	—	0.41% (35th)	—	2025-12-09
Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6…
CVE-2025-14322US	—	0.34% (26th)	—	2025-12-09
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thun…
CVE-2025-14321US	critical9.8	0.60% (48th)	Exploit	2025-12-09
Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Behebungen (10)

Behobenthunderbird-0:140.6.0-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenthunderbird-0:140.6.0-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenthunderbird-0:140.6.0-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenthunderbird-0:140.6.0-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenthunderbird-0:140.6.0-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenthunderbird-0:140.6.0-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenthunderbird-0:140.6.0-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenthunderbird-0:140.6.0-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenthunderbird-0:140.6.0-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenthunderbird-0:140.6.0-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan