CVE-2026-92014

Privilege escalation due to incorrect boundary conditions in the Graphics component

8.8 HighFix available

What does this mean?

: 8.8v3.1, from CVE List
: 0.24%15th percentile
Fixed in: 140.16.0esr-1~deb12u1firefox-esr
Published: September 15, 2026
Modified: October 29, 2026
Weakness: CWE-120
Also known as: ALSA-2026:69461ALSA-2026:69462ALSA-2026:70642ALSA-2026:71652ALSA-2026:73130ALSA-2026:73971DEBIAN-CVE-2026-92014EUVD-2026-78477
Show 38 moreShow less
GHSA-mqr4-65f4-xr47MGASA-2026-0441MGASA-2026-0449OESA-2026-4120OESA-2026-4121OESA-2026-4122OESA-2026-4123OESA-2026-4409OESA-2026-4410RHSA-2026:69461RHSA-2026:69462RHSA-2026:70642RHSA-2026:71652RHSA-2026:73130RHSA-2026:73971RHSA-2026:81392RHSA-2026:81393RHSA-2026:81394RHSA-2026:81884RHSA-2026:81912RHSA-2026:81913RHSA-2026:82122RHSA-2026:82720RHSA-2026:82779RHSA-2026:82780RHSA-2026:82817RHSA-2026:82818RHSA-2026:83076RHSA-2026:83077RHSA-2026:83496RLSA-2026:69461RLSA-2026:69462RLSA-2026:70642RLSA-2026:71652RLSA-2026:73130RLSA-2026:73971UBUNTU-CVE-2026-92014openSUSE-SU-2026:11827-1

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.24%Unchanged since Sep 16, 2026

What each source reports

CVE List Score used 8.8

Privilege escalation due to incorrect boundary conditions in the Graphics component

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.

Record: CVE-2026-92014
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-120
Updated: 2026-11-02

EUVDEUVD-2026-78477 8.8

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.

Record: EUVD-2026-78477
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-mqr4-65f4-xr47 8.8

Privilege escalation due to incorrect boundary conditions in the Graphics component. This...

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41 and Firefox ESR 140.16.

Record: GHSA-mqr4-65f4-xr47
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-120
Updated: 2026-11-02

NVD 8.8

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.

Record: CVE-2026-92014
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-120
Updated: 2026-11-02

OSVDEBIAN-CVE-2026-92014 8.8

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.

Record: DEBIAN-CVE-2026-92014
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-4120 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92005)

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92006)

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.(CVE-2026-92014)

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92015)

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92016)

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92017)

Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92018)

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92019)

Privilege escalation due to incorrect boundary…

Record: OESA-2026-4120
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

Show 42 moreShow less

OSVOESA-2026-4121 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.(CVE-2026-92014)

Privilege escalation due to incorrect boundary…

Record: OESA-2026-4121
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-4122 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.(CVE-2026-92014)

Privilege escalation due to incorrect boundary…

Record: OESA-2026-4122
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-4123 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.(CVE-2026-92014)

Privilege escalation due to incorrect boundary…

Record: OESA-2026-4123
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-4409 9.8

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100756)

Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100757)

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100758)

Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100759)

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100762)

Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100766)

Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100767)

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.(CVE-2026-100769)

Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100771)

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.(CVE-2026-100772)

Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100773)

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100774)

Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100775)

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100777)

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird…

Record: OESA-2026-4409
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-4410 9.8

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird…

Record: OESA-2026-4410
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:69461 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:69461
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:69462 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:69462
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:70642 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:70642
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:71652 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:71652
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:73130 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:73130
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:73971 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:73971
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:81392 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:81392
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:81393 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:81393
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:81394 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:81394
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:81884 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:81884
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:81912 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:81912
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:81913 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:81913
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:82122 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:82122
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:82720 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:82720
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:82779 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:82779
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:82780 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:82780
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:82817 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:82817
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:82818 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:82818
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:83076 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:83076
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:83077 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:83077
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:83496 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:83496
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:69461 7.5

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)
firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)
firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)
firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)
firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)
firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)
firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)
firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018)
firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)
firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)
firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007)
firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025)
firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029)
firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:69461
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:69462 7.5

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)
firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)
firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)
firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)
firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)
firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)
firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)
firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018)
firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)
firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)
firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007)
firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025)
firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029)
firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:69462
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:70642 7.5

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365)
firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874)
firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121)
firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145)
firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119)
firefox: Use-after-free in the Audio/Video component (CVE-2026-84120)
firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-84124)
firefox: Use-after-free in the Audio/Video component (CVE-2026-84122)
firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143)
thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639)
thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641)
thunderbird: One byte overflow read in mail parser (CVE-2026-84640)
firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)
firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)
firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)
firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)
firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)
firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)
firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)
firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018)
firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)
firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)
firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030)
firefox: thunderbird: Privilege escalation due to…

Record: RLSA-2026:70642
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:71652 7.5

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)
firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)
firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)
firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)
firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)
firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)
firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)
firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018)
firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)
firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)
firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007)
firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025)
firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029)
firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:71652
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:73130 7.5

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365)
firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874)
firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121)
firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145)
firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119)
firefox: Use-after-free in the Audio/Video component (CVE-2026-84120)
firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-84124)
firefox: Use-after-free in the Audio/Video component (CVE-2026-84122)
firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143)
thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639)
thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641)
thunderbird: One byte overflow read in mail parser (CVE-2026-84640)
firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)
firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)
firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)
firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)
firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)
firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)
firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)
firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018)
firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)
firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)
firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030)
firefox: thunderbird: Privilege escalation due to…

Record: RLSA-2026:73130
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:73971 7.5

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365)
firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874)
firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121)
firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145)
firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119)
firefox: Use-after-free in the Audio/Video component (CVE-2026-84120)
firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-84124)
firefox: Use-after-free in the Audio/Video component (CVE-2026-84122)
firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143)
thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639)
thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641)
thunderbird: One byte overflow read in mail parser (CVE-2026-84640)
firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)
firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)
firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)
firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)
firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)
firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)
firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)
firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018)
firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)
firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)
firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030)
firefox: thunderbird: Privilege escalation due to…

Record: RLSA-2026:73971
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-92014 8.8

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.

Record: UBUNTU-CVE-2026-92014
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2026:69461 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)
firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)
firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)
firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)
firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)
firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)
firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)
firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018)
firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)
firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)
firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007)
firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025)
firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029)
firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:69461
Updated: 2026-11-02

OSVALSA-2026:69462 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)
firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)
firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)
firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)
firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)
firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)
firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)
firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018)
firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)
firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)
firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007)
firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025)
firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029)
firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:69462
Updated: 2026-11-02

OSVALSA-2026:70642 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365)
firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874)
firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121)
firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145)
firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119)
firefox: Use-after-free in the Audio/Video component (CVE-2026-84120)
firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-84124)
firefox: Use-after-free in the Audio/Video component (CVE-2026-84122)
firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143)
thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639)
thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641)
thunderbird: One byte overflow read in mail parser (CVE-2026-84640)
firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)
firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)
firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)
firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)
firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)
firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)
firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)
firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018)
firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)
firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)
firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030)
firefox:…

Record: ALSA-2026:70642
Updated: 2026-11-02

OSVALSA-2026:71652 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)
firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)
firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)
firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)
firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)
firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)
firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)
firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018)
firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)
firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)
firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007)
firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025)
firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029)
firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:71652
Updated: 2026-11-02

OSVALSA-2026:73130 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365)
firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874)
firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121)
firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145)
firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119)
firefox: Use-after-free in the Audio/Video component (CVE-2026-84120)
firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-84124)
firefox: Use-after-free in the Audio/Video component (CVE-2026-84122)
firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143)
thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639)
thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641)
thunderbird: One byte overflow read in mail parser (CVE-2026-84640)
firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)
firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)
firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)
firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)
firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)
firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)
firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)
firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018)
firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)
firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)
firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030)
firefox:…

Record: ALSA-2026:73130
Updated: 2026-11-02

OSVALSA-2026:73971 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365)
firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874)
firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121)
firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145)
firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119)
firefox: Use-after-free in the Audio/Video component (CVE-2026-84120)
firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-84124)
firefox: Use-after-free in the Audio/Video component (CVE-2026-84122)
firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143)
thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639)
thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641)
thunderbird: One byte overflow read in mail parser (CVE-2026-84640)
firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)
firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)
firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)
firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)
firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)
firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)
firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)
firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018)
firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)
firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)
firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030)
firefox:…

Record: ALSA-2026:73971
Updated: 2026-11-02

OSVMGASA-2026-0441 No score

Updated nss & firefox packages fix security vulnerabilities

Use-after-free in the Audio/Video: Web Codecs component. (CVE-2026-92005) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92006) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92007) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92008) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92009) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92010) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92011) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92012) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92013) Privilege escalation due to incorrect boundary conditions in the Graphics component. (CVE-2026-92014) Privilege escalation in the WebExtensions component. (CVE-2026-92015) Use-after-free in the Disability Access APIs component. (CVE-2026-92016) Privilege escalation in the DOM: Service Workers component. (CVE-2026-92017) Sandbox escape in the DOM: Core & HTML component. (CVE-2026-92018) Mitigation bypass in the Remote Settings Client component. (CVE-2026-92019) Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. (CVE-2026-92020) Use-after-free in the JavaScript Engine: JIT component. (CVE-2026-92021) Use-after-free in the DOM: HTML Parser component. (CVE-2026-92022) Use-after-free in the XML component. (CVE-2026-92023) Use-after-free in the SVG component. (CVE-2026-92024) Use-after-free in the DOM: Navigation component. (CVE-2026-92025) Use-after-free in the Networking component. (CVE-2026-92026) Use-after-free in the DOM: Streams component. (CVE-2026-92027) Use-after-free in the DOM: Core & HTML component. (CVE-2026-92028) Use-after-free in the SVG component. (CVE-2026-92029) Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. (CVE-2026-92030) Information disclosure in the Graphics: ImageLib component. (CVE-2026-92031) Sandbox escape due to invalid pointer in the Graphics component. (CVE-2026-92032) Mitigation bypass in the Remote Settings Client component. (CVE-2026-92038) Mitigation bypass in the DOM: Notifications component. (CVE-2026-92039) Mitigation bypass in the DOM: Networking component. (CVE-2026-92041) Race condition in the DOM: Content Processes component. (CVE-2026-92042) Privilege escalation due to incorrect boundary conditions in the Audio/Video component. (CVE-2026-92043) Information disclosure in the Networking: HTTP component. (CVE-2026-92044) Sandbox escape due to incorrect boundary conditions in the WebRTC component. (CVE-2026-92045) Use-after-free in the Graphics component. (CVE-2026-92046) Privilege escalation in the Crash Reporting component. (CVE-2026-92047) Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. (CVE-2026-92052) Privilege escalation in the Graphics: CanvasWebGL component. (CVE-2026-92053) Privilege escalation in the Memory component. (CVE-2026-92054) Privilege escalation in the DevTools component. (CVE-2026-92055) Use-after-free in the Graphics: Text component. (CVE-2026-92056) Mitigation bypass in the Enterprise Policies component. (CVE-2026-92057) Use-after-free in the Graphics component. (CVE-2026-92058) Incorrect boundary conditions in the DOM: Editor component. (CVE-2026-92059) Use-after-free in the Internationalization component. (CVE-2026-92060) Privilege escalation in the Session Restore component. (CVE-2026-92062) Use-after-free in the Widget: Gtk component. (CVE-2026-92067) Site isolation issue in the Reader Mode component. (CVE-2026-92068) Spoofing issue in the DOM: Navigation component. (CVE-2026-92069)…

Record: MGASA-2026-0441
Updated: 2026-11-02

OSVMGASA-2026-0449 No score

Updated thunderbird & thunderbird-l10n packages fix security vulnerabilities

Ambiguous parsing of mail headers. (CVE-2026-92238) Buffer overrun in IMAP. (CVE-2026-92239) Out-of-bounds read in IMAP response parser. (CVE-2026-92240) Use-after-free in the Audio/Video: Web Codecs component. (CVE-2026-92005) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92006) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92007) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92008) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92009) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92010) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92011) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92012) Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-92013) Privilege escalation due to incorrect boundary conditions in the Graphics component. (CVE-2026-92014) Privilege escalation in the WebExtensions component. (CVE-2026-92015) Use-after-free in the Disability Access APIs component. (CVE-2026-92016) Privilege escalation in the DOM: Service Workers component. (CVE-2026-92017) Sandbox escape in the DOM: Core & HTML component. (CVE-2026-92018) Mitigation bypass in the Remote Settings Client component. (CVE-2026-92019) Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. (CVE-2026-92020) Use-after-free in the JavaScript Engine: JIT component. (CVE-2026-92021) Use-after-free in the DOM: HTML Parser component. (CVE-2026-92022) Use-after-free in the XML component. (CVE-2026-92023) Use-after-free in the SVG component. (CVE-2026-92024) Use-after-free in the DOM: Navigation component. (CVE-2026-92025) Use-after-free in the Networking component. (CVE-2026-92026) Use-after-free in the DOM: Streams component. (CVE-2026-92027) Use-after-free in the DOM: Core & HTML component. (CVE-2026-92028) Use-after-free in the SVG component. (CVE-2026-92029) Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. (CVE-2026-92030) Information disclosure in the Graphics: ImageLib component. (CVE-2026-92031) Sandbox escape due to invalid pointer in the Graphics component. (CVE-2026-92032) Mitigation bypass in the Remote Settings Client component. (CVE-2026-92038) Mitigation bypass in the DOM: Notifications component. (CVE-2026-92039) Mitigation bypass in the DOM: Networking component. (CVE-2026-92041) Race condition in the DOM: Content Processes component. (CVE-2026-92042) Privilege escalation due to incorrect boundary conditions in the Audio/Video component. (CVE-2026-92043) Information disclosure in the Networking: HTTP component. (CVE-2026-92044) Sandbox escape due to incorrect boundary conditions in the WebRTC component. (CVE-2026-92045) Use-after-free in the Graphics component. (CVE-2026-92046) Privilege escalation in the Crash Reporting component. (CVE-2026-92047) Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. (CVE-2026-92052) Privilege escalation in the Graphics: CanvasWebGL component. (CVE-2026-92053) Privilege escalation in the Memory component. (CVE-2026-92054) Privilege escalation in the DevTools component. (CVE-2026-92055) Use-after-free in the Graphics: Text component. (CVE-2026-92056) Mitigation bypass in the Enterprise Policies component. (CVE-2026-92057) Use-after-free in the Graphics component. (CVE-2026-92058) Incorrect boundary conditions in the DOM: Editor component. (CVE-2026-92059) Use-after-free in the Internationalization component. (CVE-2026-92060) Privilege escalation in the Session Restore component. (CVE-2026-92062) Use-after-free in the Widget: Gtk component.…

Record: MGASA-2026-0449
Updated: 2026-11-02

OSVopenSUSE-SU-2026:11827-1 No score

MozillaThunderbird-140.16.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.16.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:11827-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`firefox` AlmaLinux:10 From an advisory covering 28 CVEs	before 140.16.0-1.el10_2	140.16.0-1.el10_2
`firefox` AlmaLinux:9 From an advisory covering 28 CVEs	before 140.16.0-1.el9_8.alma.1	140.16.0-1.el9_8.alma.1
`firefox-x11` AlmaLinux:9 From an advisory covering 28 CVEs	before 140.16.0-1.el9_8.alma.1	140.16.0-1.el9_8.alma.1
`thunderbird` AlmaLinux:9 From an advisory covering 44 CVEs	before 140.16.0-1.el9_8.alma.1	140.16.0-1.el9_8.alma.1
`firefox` AlmaLinux:8 From an advisory covering 28 CVEs	before 140.16.0-1.el8_10.alma.1	140.16.0-1.el8_10.alma.1
`thunderbird` AlmaLinux:10 From an advisory covering 44 CVEs	before 140.16.0-1.el10_2.alma.1	140.16.0-1.el10_2.alma.1
`thunderbird` AlmaLinux:8 From an advisory covering 44 CVEs	before 140.16.0-1.el8_10.alma.1	140.16.0-1.el8_10.alma.1
`firefox-esr` Debian:12	before 140.16.0esr-1~deb12u1, plus listed versions 102.11.0esr-1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1 Show 45 moreShow less 102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1115.0.2esr-1115.1.0esr-1115.10.0esr-1115.10.0esr-1~deb10u1115.10.0esr-1~deb11u1115.10.0esr-1~deb12u1115.11.0esr-1115.11.0esr-1~deb10u1115.11.0esr-1~deb11u1115.11.0esr-1~deb12u1115.12.0esr-1115.12.0esr-1~deb10u1115.12.0esr-1~deb11u1115.12.0esr-1~deb12u1115.13.0esr-1115.13.0esr-1~deb11u1115.13.0esr-1~deb12u1115.13.0esr-2115.14.0esr-1115.14.0esr-1~deb11u1115.14.0esr-1~deb12u1115.15.0esr-1115.15.0esr-1~deb11u1115.15.0esr-1~deb12u1115.2.0esr-1115.2.1esr-1115.3.0esr-1115.3.0esr-1~deb10u1115.3.0esr-1~deb11u1115.3.0esr-1~deb12u1115.3.1esr-1~deb10u1115.3.1esr-1~deb11u1	140.16.0esr-1~deb12u1
`firefox-esr` Debian:13	before 140.16.0esr-1~deb13u1, plus listed versions 128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1 Show 45 moreShow less 140.10.0esr-1140.10.0esr-1~deb11u1140.10.0esr-1~deb12u1140.10.0esr-1~deb13u1140.10.1esr-1140.10.1esr-1~deb11u1140.10.1esr-1~deb12u1140.10.1esr-1~deb13u1140.10.2esr-1140.10.2esr-1~deb11u1140.10.2esr-1~deb12u1140.10.2esr-1~deb13u1140.11.0esr-1140.11.0esr-1~deb11u1140.11.0esr-1~deb12u1140.11.0esr-1~deb13u1140.12.0esr-1140.12.0esr-1~deb11u1140.12.0esr-1~deb12u1140.12.0esr-1~deb13u1140.13.0esr-1140.13.0esr-1~deb11u1140.13.0esr-1~deb12u1140.13.0esr-1~deb13u1140.13.0esr-2140.14.0esr-1~deb11u1140.14.0esr-1~deb12u1140.14.0esr-1~deb13u1140.14.0esr-2140.15.0esr-1140.15.0esr-1~deb12u1140.15.0esr-1~deb13u1140.16.0esr-1~deb12u1140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1140.3.1esr-2140.4.0esr-1	140.16.0esr-1~deb13u1
`firefox-esr` Debian:14	before 140.16.0esr-1, plus listed versions 128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1 Show 45 moreShow less 140.10.0esr-1140.10.0esr-1~deb11u1140.10.0esr-1~deb12u1140.10.0esr-1~deb13u1140.10.1esr-1140.10.1esr-1~deb11u1140.10.1esr-1~deb12u1140.10.1esr-1~deb13u1140.10.2esr-1140.10.2esr-1~deb11u1140.10.2esr-1~deb12u1140.10.2esr-1~deb13u1140.11.0esr-1140.11.0esr-1~deb11u1140.11.0esr-1~deb12u1140.11.0esr-1~deb13u1140.12.0esr-1140.12.0esr-1~deb11u1140.12.0esr-1~deb12u1140.12.0esr-1~deb13u1140.13.0esr-1140.13.0esr-1~deb11u1140.13.0esr-1~deb12u1140.13.0esr-1~deb13u1140.13.0esr-2140.14.0esr-1~deb11u1140.14.0esr-1~deb12u1140.14.0esr-1~deb13u1140.14.0esr-2140.15.0esr-1140.15.0esr-1~deb12u1140.15.0esr-1~deb13u1140.16.0esr-1~deb12u1140.16.0esr-1~deb13u1140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1140.3.1esr-2	140.16.0esr-1

Show 120 moreShow less

Affected packages
Package	Affected	Fixed
`thunderbird` Debian:12	before 1:140.16.0esr-1~deb12u1, plus listed versions 1:102.11.0-11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u1 Show 45 moreShow less 1:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:103.0~b5-11:104.0~b2-11:110.0~b4-11:112.0~b1-11:113.0~b3-11:114.0~b2-11:115.0-11:115.0.1-11:115.0.1-21:115.0~b4-11:115.0~b6-11:115.1.0-11:115.1.1-11:115.10.1-11:115.10.1-1~deb10u11:115.10.1-1~deb11u11:115.10.1-1~deb12u11:115.11.0-11:115.11.0-1~deb10u11:115.11.0-1~deb11u11:115.11.0-1~deb12u11:115.12.0-11:115.12.0-1~deb10u11:115.12.0-1~deb11u11:115.12.0-1~deb12u11:115.13.0-11:115.13.0-1~deb11u11:115.13.0-1~deb12u1	1:140.16.0esr-1~deb12u1
`thunderbird` Debian:13	before 1:140.16.0esr-1~deb13u1, plus listed versions 1:128.13.0esr-11:128.14.0esr-11:128.14.0esr-1~deb11u11:128.14.0esr-1~deb12u11:128.14.0esr-1~deb13u1 Show 45 moreShow less 1:129.0~b6-11:130.0~b3-11:132.0~b6-11:135.0-11:136.0-11:137.0-11:138.0-11:140.0.1esr-11:140.1.0esr-11:140.1.1esr-11:140.10.0esr-11:140.10.0esr-1~deb11u11:140.10.0esr-1~deb12u11:140.10.0esr-1~deb13u11:140.10.1esr-11:140.10.1esr-1~deb11u11:140.10.1esr-1~deb12u11:140.10.1esr-1~deb13u11:140.10.2esr-11:140.10.2esr-1~deb11u11:140.10.2esr-1~deb12u11:140.10.2esr-1~deb13u11:140.11.0esr-11:140.11.0esr-1~deb11u11:140.11.0esr-1~deb12u11:140.11.0esr-1~deb13u11:140.12.0esr-11:140.12.0esr-1~deb11u11:140.12.0esr-1~deb12u11:140.12.0esr-1~deb13u11:140.13.0esr-11:140.13.0esr-21:140.13.0esr-2~deb11u11:140.13.0esr-2~deb12u11:140.13.0esr-2~deb13u11:140.14.0esr-11:140.14.0esr-1~deb11u11:140.14.0esr-1~deb12u11:140.14.0esr-1~deb13u11:140.15.0esr-1~deb12u11:140.15.0esr-1~deb13u11:140.16.0esr-1~deb12u11:140.2.0esr-11:140.3.0esr-11:140.3.0esr-1~deb11u1	1:140.16.0esr-1~deb13u1
`thunderbird` Debian:14	before 1:153.3.0esr-1, plus listed versions 1:128.13.0esr-11:128.14.0esr-11:128.14.0esr-1~deb11u11:128.14.0esr-1~deb12u11:128.14.0esr-1~deb13u1 Show 45 moreShow less 1:129.0~b6-11:130.0~b3-11:132.0~b6-11:135.0-11:136.0-11:137.0-11:138.0-11:140.0.1esr-11:140.1.0esr-11:140.1.1esr-11:140.10.0esr-11:140.10.0esr-1~deb11u11:140.10.0esr-1~deb12u11:140.10.0esr-1~deb13u11:140.10.1esr-11:140.10.1esr-1~deb11u11:140.10.1esr-1~deb12u11:140.10.1esr-1~deb13u11:140.10.2esr-11:140.10.2esr-1~deb11u11:140.10.2esr-1~deb12u11:140.10.2esr-1~deb13u11:140.11.0esr-11:140.11.0esr-1~deb11u11:140.11.0esr-1~deb12u11:140.11.0esr-1~deb13u11:140.12.0esr-11:140.12.0esr-1~deb11u11:140.12.0esr-1~deb12u11:140.12.0esr-1~deb13u11:140.13.0esr-11:140.13.0esr-21:140.13.0esr-2~deb11u11:140.13.0esr-2~deb12u11:140.13.0esr-2~deb13u11:140.14.0esr-11:140.14.0esr-1~deb11u11:140.14.0esr-1~deb12u11:140.14.0esr-1~deb13u11:140.15.0esr-1~deb12u11:140.15.0esr-1~deb13u11:140.16.0esr-1~deb12u11:140.16.0esr-1~deb13u11:140.17.0esr-1~deb12u11:140.17.0esr-1~deb13u1	1:153.3.0esr-1
`firefox-l10n` Mageia:10 From an advisory covering 59 CVEs	before 153.3.0-1.mga10	153.3.0-1.mga10
`nss` Mageia:10 From an advisory covering 59 CVEs	before 3.129.0-1.mga10	3.129.0-1.mga10
`firefox` Mageia:10 From an advisory covering 59 CVEs	before 153.3.0-1.mga10	153.3.0-1.mga10
`firefox-l10n` Mageia:9 From an advisory covering 59 CVEs	before 140.16.0-1.mga9	140.16.0-1.mga9
`nss` Mageia:9 From an advisory covering 59 CVEs	before 3.129.0-1.mga9	3.129.0-1.mga9
`firefox` Mageia:9 From an advisory covering 59 CVEs	before 140.16.0-1.mga9	140.16.0-1.mga9
`thunderbird` Mageia:10 From an advisory covering 62 CVEs	before 153.3.0-1.mga10	153.3.0-1.mga10
`thunderbird-l10n` Mageia:10 From an advisory covering 62 CVEs	before 153.3.0-1.mga10	153.3.0-1.mga10
`thunderbird` Mageia:9 From an advisory covering 62 CVEs	before 140.16.0-1.mga9	140.16.0-1.mga9
`thunderbird-l10n` Mageia:9 From an advisory covering 62 CVEs	before 140.16.0-1.mga9	140.16.0-1.mga9
`firefox` openEuler:22.03-LTS-SP4 From an advisory covering 28 CVEs	before 140.16.0-1.oe2203sp4	140.16.0-1.oe2203sp4
`firefox` openEuler:24.03-LTS-SP1 From an advisory covering 28 CVEs	before 140.16.0-1.oe2403sp1	140.16.0-1.oe2403sp1
`firefox` openEuler:24.03-LTS-SP3 From an advisory covering 28 CVEs	before 140.16.0-1.oe2403sp3	140.16.0-1.oe2403sp3
`firefox` openEuler:24.03-LTS-SP4 From an advisory covering 28 CVEs	before 140.16.0-1.oe2403sp4	140.16.0-1.oe2403sp4
`thunderbird` openEuler:24.03-LTS-SP3 From an advisory covering 74 CVEs	before 140.16.0-1.oe2403sp3	140.16.0-1.oe2403sp3
`thunderbird` openEuler:24.03-LTS-SP4 From an advisory covering 74 CVEs	before 140.16.0-1.oe2403sp4	140.16.0-1.oe2403sp4
`firefox` Red Hat:enterprise_linux:10.2 From an advisory covering 28 CVEs	before 0:140.16.0-1.el10_2	0:140.16.0-1.el10_2
`firefox-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 28 CVEs	before 0:140.16.0-1.el10_2	0:140.16.0-1.el10_2
`firefox-debugsource` Red Hat:enterprise_linux:10.2 From an advisory covering 28 CVEs	before 0:140.16.0-1.el10_2	0:140.16.0-1.el10_2
`firefox` Red Hat:enterprise_linux:9::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_8	0:140.16.0-1.el9_8
`firefox-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_8	0:140.16.0-1.el9_8
`firefox-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_8	0:140.16.0-1.el9_8
`firefox-x11` Red Hat:enterprise_linux:9::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_8	0:140.16.0-1.el9_8
`thunderbird` Red Hat:enterprise_linux:9::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el9_8	0:140.16.0-1.el9_8
`thunderbird-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el9_8	0:140.16.0-1.el9_8
`thunderbird-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el9_8	0:140.16.0-1.el9_8
`firefox` Red Hat:enterprise_linux:8::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_10	0:140.16.0-1.el8_10
`firefox-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_10	0:140.16.0-1.el8_10
`firefox-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_10	0:140.16.0-1.el8_10
`thunderbird` Red Hat:enterprise_linux:10.2 From an advisory covering 44 CVEs	before 0:140.16.0-1.el10_2	0:140.16.0-1.el10_2
`thunderbird-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 44 CVEs	before 0:140.16.0-1.el10_2	0:140.16.0-1.el10_2
`thunderbird-debugsource` Red Hat:enterprise_linux:10.2 From an advisory covering 44 CVEs	before 0:140.16.0-1.el10_2	0:140.16.0-1.el10_2
`thunderbird` Red Hat:enterprise_linux:8::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_10	0:140.16.0-1.el8_10
`thunderbird-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_10	0:140.16.0-1.el8_10
`thunderbird-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_10	0:140.16.0-1.el8_10
`thunderbird` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 31 CVEs	before 0:140.16.0-1.el10_0	0:140.16.0-1.el10_0
`thunderbird-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 31 CVEs	before 0:140.16.0-1.el10_0	0:140.16.0-1.el10_0
`thunderbird-debugsource` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 31 CVEs	before 0:140.16.0-1.el10_0	0:140.16.0-1.el10_0
`thunderbird` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 31 CVEs	before 0:140.16.0-1.el9_4	0:140.16.0-1.el9_4
`thunderbird-debuginfo` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 31 CVEs	before 0:140.16.0-1.el9_4	0:140.16.0-1.el9_4
`thunderbird-debugsource` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 31 CVEs	before 0:140.16.0-1.el9_4	0:140.16.0-1.el9_4
`thunderbird` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 31 CVEs	before 0:140.16.0-1.el9_2	0:140.16.0-1.el9_2
`thunderbird-debuginfo` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 31 CVEs	before 0:140.16.0-1.el9_2	0:140.16.0-1.el9_2
`thunderbird-debugsource` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 31 CVEs	before 0:140.16.0-1.el9_2	0:140.16.0-1.el9_2
`thunderbird` Red Hat:rhel_eus:9.6::appstream From an advisory covering 31 CVEs	before 0:140.16.0-1.el9_6	0:140.16.0-1.el9_6
`thunderbird-debuginfo` Red Hat:rhel_eus:9.6::appstream From an advisory covering 31 CVEs	before 0:140.16.0-1.el9_6	0:140.16.0-1.el9_6
`thunderbird-debugsource` Red Hat:rhel_eus:9.6::appstream From an advisory covering 31 CVEs	before 0:140.16.0-1.el9_6	0:140.16.0-1.el9_6
`thunderbird` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_8	0:140.16.0-1.el8_8
`thunderbird-debuginfo` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_8	0:140.16.0-1.el8_8
`thunderbird-debugsource` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_8	0:140.16.0-1.el8_8
`thunderbird` Red Hat:rhel_tus:8.8::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_8	0:140.16.0-1.el8_8
`thunderbird-debuginfo` Red Hat:rhel_tus:8.8::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_8	0:140.16.0-1.el8_8
`thunderbird-debugsource` Red Hat:rhel_tus:8.8::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_8	0:140.16.0-1.el8_8
`thunderbird` Red Hat:rhel_aus:8.6::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_6	0:140.16.0-1.el8_6
`thunderbird-debuginfo` Red Hat:rhel_aus:8.6::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_6	0:140.16.0-1.el8_6
`thunderbird-debugsource` Red Hat:rhel_aus:8.6::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_6	0:140.16.0-1.el8_6
`thunderbird` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_6	0:140.16.0-1.el8_6
`thunderbird-debuginfo` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_6	0:140.16.0-1.el8_6
`thunderbird-debugsource` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_6	0:140.16.0-1.el8_6
`thunderbird` Red Hat:rhel_aus:8.4::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_4	0:140.16.0-1.el8_4
`thunderbird-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_4	0:140.16.0-1.el8_4
`thunderbird-debugsource` Red Hat:rhel_aus:8.4::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_4	0:140.16.0-1.el8_4
`thunderbird` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_4	0:140.16.0-1.el8_4
`thunderbird-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_4	0:140.16.0-1.el8_4
`thunderbird-debugsource` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_4	0:140.16.0-1.el8_4
`firefox` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_8	0:140.16.0-1.el8_8
`firefox-debuginfo` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_8	0:140.16.0-1.el8_8
`firefox-debugsource` Red Hat:rhel_e4s:8.8::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_8	0:140.16.0-1.el8_8
`firefox` Red Hat:rhel_tus:8.8::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_8	0:140.16.0-1.el8_8
`firefox-debuginfo` Red Hat:rhel_tus:8.8::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_8	0:140.16.0-1.el8_8
`firefox-debugsource` Red Hat:rhel_tus:8.8::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_8	0:140.16.0-1.el8_8
`firefox` Red Hat:rhel_aus:8.4::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_4	0:140.16.0-1.el8_4
`firefox-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_4	0:140.16.0-1.el8_4
`firefox-debugsource` Red Hat:rhel_aus:8.4::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_4	0:140.16.0-1.el8_4
`firefox` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_4	0:140.16.0-1.el8_4
`firefox-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_4	0:140.16.0-1.el8_4
`firefox-debugsource` Red Hat:rhel_eus_long_life:8.4::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_4	0:140.16.0-1.el8_4
`firefox` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_2	0:140.16.0-1.el9_2
`firefox-debuginfo` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_2	0:140.16.0-1.el9_2
`firefox-debugsource` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_2	0:140.16.0-1.el9_2
`firefox-x11` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_2	0:140.16.0-1.el9_2
`firefox` Red Hat:rhel_eus:9.6::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_6	0:140.16.0-1.el9_6
`firefox-debuginfo` Red Hat:rhel_eus:9.6::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_6	0:140.16.0-1.el9_6
`firefox-debugsource` Red Hat:rhel_eus:9.6::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_6	0:140.16.0-1.el9_6
`firefox-x11` Red Hat:rhel_eus:9.6::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_6	0:140.16.0-1.el9_6
`firefox` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 28 CVEs	before 0:140.16.0-1.el10_0	0:140.16.0-1.el10_0
`firefox-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 28 CVEs	before 0:140.16.0-1.el10_0	0:140.16.0-1.el10_0
`firefox-debugsource` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 28 CVEs	before 0:140.16.0-1.el10_0	0:140.16.0-1.el10_0
`firefox` Red Hat:rhel_aus:8.6::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_6	0:140.16.0-1.el8_6
`firefox-debuginfo` Red Hat:rhel_aus:8.6::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_6	0:140.16.0-1.el8_6
`firefox-debugsource` Red Hat:rhel_aus:8.6::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_6	0:140.16.0-1.el8_6
`firefox` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_6	0:140.16.0-1.el8_6
`firefox-debuginfo` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_6	0:140.16.0-1.el8_6
`firefox-debugsource` Red Hat:rhel_eus_long_life:8.6::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_6	0:140.16.0-1.el8_6
`firefox` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_4	0:140.16.0-1.el9_4
`firefox-debuginfo` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_4	0:140.16.0-1.el9_4
`firefox-debugsource` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_4	0:140.16.0-1.el9_4
`firefox-x11` Red Hat:rhel_e4s:9.4::appstream From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_4	0:140.16.0-1.el9_4
`firefox` Red Hat:rhel_els:7 From an advisory covering 28 CVEs	before 0:140.16.0-1.el7_9	0:140.16.0-1.el7_9
`firefox-debuginfo` Red Hat:rhel_els:7 From an advisory covering 28 CVEs	before 0:140.16.0-1.el7_9	0:140.16.0-1.el7_9
`firefox` Rocky Linux:10 From an advisory covering 28 CVEs	before 0:140.16.0-1.el10_2	0:140.16.0-1.el10_2
`firefox` Rocky Linux:9 From an advisory covering 28 CVEs	before 0:140.16.0-1.el9_8	0:140.16.0-1.el9_8
`thunderbird` Rocky Linux:9 From an advisory covering 44 CVEs	before 0:140.16.0-1.el9_8	0:140.16.0-1.el9_8
`firefox` Rocky Linux:8 From an advisory covering 28 CVEs	before 0:140.16.0-1.el8_10	0:140.16.0-1.el8_10
`thunderbird` Rocky Linux:10 From an advisory covering 44 CVEs	before 0:140.16.0-1.el10_2	0:140.16.0-1.el10_2
`thunderbird` Rocky Linux:8 From an advisory covering 44 CVEs	before 0:140.16.0-1.el8_10	0:140.16.0-1.el8_10
`mozjs52` Ubuntu:18.04:LTS	All versions, plus listed versions 52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1	None known
`mozjs38` Ubuntu:18.04:LTS	All versions, plus listed versions 38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4	None known
`mozjs68` Ubuntu:20.04:LTS	All versions, plus listed versions 68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1	None known
`mozjs52` Ubuntu:20.04:LTS	All versions, plus listed versions 52.9.1-1build152.9.1-1ubuntu3	None known
`mozjs102` Ubuntu:22.04:LTS	All versions, plus listed versions 102.11.0-0ubuntu0.22.04.1102.12.0-0ubuntu0.22.04.1102.13.0-0ubuntu0.22.04.1102.15.1-0ubuntu0.22.04.1	None known
`mozjs78` Ubuntu:22.04:LTS	All versions, plus listed versions 78.13.0-178.15.0-278.15.0-4ubuntu1	None known
`mozjs91` Ubuntu:22.04:LTS	All versions, plus listed versions 91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1	None known
`thunderbird` Ubuntu:22.04:LTS	All versions, plus listed versions 1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1 Show 34 moreShow less 1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.11:115.3.1+build1-0ubuntu0.22.04.21:115.4.1+build1-0ubuntu0.22.04.11:115.5.0+build1-0ubuntu0.22.04.11:115.6.0+build2-0ubuntu0.22.04.11:115.8.1+build1-0ubuntu0.22.04.11:115.9.0+build1-0ubuntu0.22.04.11:115.10.1+build1-0ubuntu0.22.04.11:115.11.0+build2-0ubuntu0.22.04.11:115.12.0+build3-0ubuntu0.22.04.11:115.13.0+build5-0ubuntu0.22.04.11:115.15.0+build1-0ubuntu0.22.04.11:115.16.0+build2-0ubuntu0.22.04.11:115.18.0+build1-0ubuntu0.22.04.11:128.12.0+build1-0ubuntu0.22.04.11:140.7.1+build1-0ubuntu0.22.04.1	None known
`mozjs102` Ubuntu:24.04:LTS	All versions, plus listed versions 102.15.1-1102.15.1-3ubuntu2	None known
`mozjs115` Ubuntu:24.04:LTS	All versions, plus listed versions 115.3.0-0ubuntu1115.4.0-2115.5.0-1115.6.0-1115.7.0-4 Show 4 moreShow less 115.8.0-1115.9.0-1115.9.0-1build1115.10.0-1	None known
`MozillaThunderbird` openSUSE:Tumbleweed From an advisory covering 31 CVEs	before 140.16.0-1.1	140.16.0-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-92014 is a high vulnerability (CVSS 8.8) in Mozilla Firefox, published September 15, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in firefox-esr 140.16.0esr-1~deb12u1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 467 versions, 182 references and the rest of 14 source descriptions. The JSON record has them.