{"id":"CVE-2026-84641","aliases":["ALSA-2026:70642","ALSA-2026:73130","ALSA-2026:73971","DEBIAN-CVE-2026-84641","EUVD-2026-69710","GHSA-f2hg-25f8-vgfj","MGASA-2026-0388","OESA-2026-3842","OESA-2026-3982","RHSA-2026:70642","RHSA-2026:73130","RHSA-2026:73971","RHSA-2026:77627","RHSA-2026:77631","RHSA-2026:77632","RHSA-2026:80503","RHSA-2026:81912","RHSA-2026:81913","RHSA-2026:82122","RLSA-2026:70642","RLSA-2026:73130","RLSA-2026:73971","SUSE-SU-2026:4268-1","UBUNTU-CVE-2026-84641","openSUSE-SU-2026:11678-1"],"status":"published","title":"Information disclosure due to malicious IMAP server response","description":"A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00267,"percentile":0.18986,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2026-09-01T21:33:07Z","modified":"2026-10-29T11:30:51Z","fixes":[{"ecosystem":"Debian:12","package":"thunderbird","fixed_in":["1:140.15.0esr-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"thunderbird","fixed_in":["1:140.15.0esr-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:153.2.0esr-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.16.0-1.el9_8.alma.1"}]}],"bundled":44},{"source":"osv","ecosystem":"AlmaLinux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.16.0-1.el10_2.alma.1"}]}],"bundled":44},{"source":"osv","ecosystem":"AlmaLinux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.16.0-1.el8_10.alma.1"}]}],"bundled":44},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.15.0esr-1~deb12u1"}]}],"versions":["1:102.11.0-1","1:102.12.0-1","1:102.12.0-1~deb10u1","1:102.12.0-1~deb11u1","1:102.12.0-1~deb12u1","1:102.13.0-1","1:102.13.0-1~deb10u1","1:102.13.0-1~deb11u1","1:102.13.0-1~deb12u1","1:102.13.1-1","1:102.13.1-1~deb10u1","1:102.13.1-1~deb11u1","1:102.13.1-1~deb12u1","1:102.14.0-1~deb10u1","1:102.14.0-1~deb11u1","1:102.14.0-1~deb12u1","1:102.15.0-1~deb10u1","1:102.15.0-1~deb11u1","1:102.15.0-1~deb12u1","1:102.15.1-1~deb10u1","1:102.15.1-1~deb11u1","1:102.15.1-1~deb12u1","1:103.0~b5-1","1:104.0~b2-1","1:110.0~b4-1","1:112.0~b1-1","1:113.0~b3-1","1:114.0~b2-1","1:115.0-1","1:115.0.1-1","1:115.0.1-2","1:115.0~b4-1","1:115.0~b6-1","1:115.1.0-1","1:115.1.1-1","1:115.10.1-1","1:115.10.1-1~deb10u1","1:115.10.1-1~deb11u1","1:115.10.1-1~deb12u1","1:115.11.0-1","1:115.11.0-1~deb10u1","1:115.11.0-1~deb11u1","1:115.11.0-1~deb12u1","1:115.12.0-1","1:115.12.0-1~deb10u1","1:115.12.0-1~deb11u1","1:115.12.0-1~deb12u1","1:115.13.0-1","1:115.13.0-1~deb11u1","1:115.13.0-1~deb12u1","1:115.14.0-1~deb11u1","1:115.14.0-1~deb12u1","1:115.15.0-1~deb11u1","1:115.15.0-1~deb12u1","1:115.16.0esr-1~deb11u1","1:115.16.0esr-1~deb12u1","1:115.2.0-1","1:115.2.2-1","1:115.3.0-1","1:115.3.0-1~deb12u1","1:115.3.1-1","1:115.3.1-1~deb10u1","1:115.3.1-1~deb11u1","1:115.3.1-1~deb12u1","1:115.4.1-1","1:115.4.1-1~deb10u1","1:115.4.1-1~deb11u1","1:115.4.1-1~deb12u1","1:115.5.0-1","1:115.5.0-1~deb10u1","1:115.5.0-1~deb11u1","1:115.5.0-1~deb12u1","1:115.5.1-1","1:115.5.2-1","1:115.6.0-1","1:115.6.0-1~deb10u1","1:115.6.0-1~deb11u1","1:115.6.0-1~deb12u1","1:115.7.0-1","1:115.7.0-1~deb10u1","1:115.7.0-1~deb11u1","1:115.7.0-1~deb12u1","1:115.8.0-1","1:115.8.0-1~deb10u1","1:115.8.0-1~deb11u1","1:115.8.0-1~deb12u1","1:115.8.1-1","1:115.9.0-1","1:115.9.0-1~deb10u1","1:115.9.0-1~deb11u1","1:115.9.0-1~deb12u1","1:116.0~b7-1","1:117.0~b5-1","1:120.0~b1-1","1:121.0~b3-1","1:122.0~b2-1","1:124.0~b5-1","1:125.0~b3-1","1:127.0~b5-1","1:128.0esr-1","1:128.0~b5-1","1:128.1.0esr-1","1:128.1.1esr-1","1:128.10.0esr-1","1:128.10.0esr-1~deb11u1","1:128.10.0esr-1~deb12u1","1:128.10.1esr-1","1:128.10.1esr-1~deb11u1","1:128.10.1esr-1~deb12u1","1:128.11.0esr-1","1:128.11.0esr-1~deb11u1","1:128.11.0esr-1~deb12u1","1:128.12.0esr-1","1:128.12.0esr-1~deb11u1","1:128.12.0esr-1~deb12u1","1:128.13.0esr-1","1:128.13.0esr-1~deb11u1","1:128.13.0esr-1~deb12u1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:128.2.0esr-1","1:128.2.1esr-1","1:128.2.3esr-1","1:128.3.0esr-1","1:128.3.2esr-1","1:128.4.0esr-1","1:128.4.0esr-1~deb11u1","1:128.4.0esr-1~deb12u1","1:128.4.2esr-1","1:128.4.3esr-1","1:128.4.3esr-1~deb11u1","1:128.4.3esr-1~deb12u1","1:128.5.0esr-1","1:128.5.0esr-1~deb11u1","1:128.5.0esr-1~deb12u1","1:128.5.2esr-1","1:128.6.0esr-1","1:128.6.0esr-1~deb11u1","1:128.6.0esr-1~deb12u1","1:128.7.0esr-1","1:128.7.0esr-1~deb11u1","1:128.7.0esr-1~deb12u1","1:128.8.0esr-1","1:128.8.0esr-1~deb11u1","1:128.8.0esr-1~deb12u1","1:128.9.0esr-1","1:128.9.0esr-1~deb11u1","1:128.9.0esr-1~deb12u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.10.0esr-1","1:140.10.0esr-1~deb11u1","1:140.10.0esr-1~deb12u1","1:140.10.0esr-1~deb13u1","1:140.10.1esr-1","1:140.10.1esr-1~deb11u1","1:140.10.1esr-1~deb12u1","1:140.10.1esr-1~deb13u1","1:140.10.2esr-1","1:140.10.2esr-1~deb11u1","1:140.10.2esr-1~deb12u1","1:140.10.2esr-1~deb13u1","1:140.11.0esr-1","1:140.11.0esr-1~deb11u1","1:140.11.0esr-1~deb12u1","1:140.11.0esr-1~deb13u1","1:140.12.0esr-1","1:140.12.0esr-1~deb11u1","1:140.12.0esr-1~deb12u1","1:140.12.0esr-1~deb13u1","1:140.13.0esr-1","1:140.13.0esr-2","1:140.13.0esr-2~deb11u1","1:140.13.0esr-2~deb12u1","1:140.13.0esr-2~deb13u1","1:140.14.0esr-1","1:140.14.0esr-1~deb11u1","1:140.14.0esr-1~deb12u1","1:140.14.0esr-1~deb13u1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1","1:140.5.0esr-1~deb13u1","1:140.6.0esr-1","1:140.6.0esr-1~deb11u1","1:140.6.0esr-1~deb12u1","1:140.6.0esr-1~deb13u1","1:140.7.0esr-1","1:140.7.0esr-1~deb11u1","1:140.7.0esr-1~deb12u1","1:140.7.0esr-1~deb13u1","1:140.7.1esr-1","1:140.7.1esr-1~deb11u1","1:140.7.1esr-1~deb12u1","1:140.7.1esr-1~deb13u1","1:140.8.0esr-1","1:140.8.0esr-1~deb11u1","1:140.8.0esr-1~deb12u1","1:140.8.0esr-1~deb13u1","1:140.9.0esr-1","1:140.9.0esr-1~deb11u1","1:140.9.0esr-1~deb12u1","1:140.9.0esr-1~deb13u1","1:140.9.1esr-1","1:140.9.1esr-1~deb11u1","1:140.9.1esr-1~deb12u1","1:140.9.1esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.15.0esr-1~deb13u1"}]}],"versions":["1:128.13.0esr-1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.10.0esr-1","1:140.10.0esr-1~deb11u1","1:140.10.0esr-1~deb12u1","1:140.10.0esr-1~deb13u1","1:140.10.1esr-1","1:140.10.1esr-1~deb11u1","1:140.10.1esr-1~deb12u1","1:140.10.1esr-1~deb13u1","1:140.10.2esr-1","1:140.10.2esr-1~deb11u1","1:140.10.2esr-1~deb12u1","1:140.10.2esr-1~deb13u1","1:140.11.0esr-1","1:140.11.0esr-1~deb11u1","1:140.11.0esr-1~deb12u1","1:140.11.0esr-1~deb13u1","1:140.12.0esr-1","1:140.12.0esr-1~deb11u1","1:140.12.0esr-1~deb12u1","1:140.12.0esr-1~deb13u1","1:140.13.0esr-1","1:140.13.0esr-2","1:140.13.0esr-2~deb11u1","1:140.13.0esr-2~deb12u1","1:140.13.0esr-2~deb13u1","1:140.14.0esr-1","1:140.14.0esr-1~deb11u1","1:140.14.0esr-1~deb12u1","1:140.14.0esr-1~deb13u1","1:140.15.0esr-1~deb12u1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1","1:140.5.0esr-1~deb13u1","1:140.6.0esr-1","1:140.6.0esr-1~deb11u1","1:140.6.0esr-1~deb12u1","1:140.6.0esr-1~deb13u1","1:140.7.0esr-1","1:140.7.0esr-1~deb11u1","1:140.7.0esr-1~deb12u1","1:140.7.0esr-1~deb13u1","1:140.7.1esr-1","1:140.7.1esr-1~deb11u1","1:140.7.1esr-1~deb12u1","1:140.7.1esr-1~deb13u1","1:140.8.0esr-1","1:140.8.0esr-1~deb11u1","1:140.8.0esr-1~deb12u1","1:140.8.0esr-1~deb13u1","1:140.9.0esr-1","1:140.9.0esr-1~deb11u1","1:140.9.0esr-1~deb12u1","1:140.9.0esr-1~deb13u1","1:140.9.1esr-1","1:140.9.1esr-1~deb11u1","1:140.9.1esr-1~deb12u1","1:140.9.1esr-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:153.2.0esr-1"}]}],"versions":["1:128.13.0esr-1","1:128.14.0esr-1","1:128.14.0esr-1~deb11u1","1:128.14.0esr-1~deb12u1","1:128.14.0esr-1~deb13u1","1:129.0~b6-1","1:130.0~b3-1","1:132.0~b6-1","1:135.0-1","1:136.0-1","1:137.0-1","1:138.0-1","1:140.0.1esr-1","1:140.1.0esr-1","1:140.1.1esr-1","1:140.10.0esr-1","1:140.10.0esr-1~deb11u1","1:140.10.0esr-1~deb12u1","1:140.10.0esr-1~deb13u1","1:140.10.1esr-1","1:140.10.1esr-1~deb11u1","1:140.10.1esr-1~deb12u1","1:140.10.1esr-1~deb13u1","1:140.10.2esr-1","1:140.10.2esr-1~deb11u1","1:140.10.2esr-1~deb12u1","1:140.10.2esr-1~deb13u1","1:140.11.0esr-1","1:140.11.0esr-1~deb11u1","1:140.11.0esr-1~deb12u1","1:140.11.0esr-1~deb13u1","1:140.12.0esr-1","1:140.12.0esr-1~deb11u1","1:140.12.0esr-1~deb12u1","1:140.12.0esr-1~deb13u1","1:140.13.0esr-1","1:140.13.0esr-2","1:140.13.0esr-2~deb11u1","1:140.13.0esr-2~deb12u1","1:140.13.0esr-2~deb13u1","1:140.14.0esr-1","1:140.14.0esr-1~deb11u1","1:140.14.0esr-1~deb12u1","1:140.14.0esr-1~deb13u1","1:140.15.0esr-1~deb12u1","1:140.15.0esr-1~deb13u1","1:140.16.0esr-1~deb12u1","1:140.16.0esr-1~deb13u1","1:140.17.0esr-1~deb12u1","1:140.17.0esr-1~deb13u1","1:140.2.0esr-1","1:140.3.0esr-1","1:140.3.0esr-1~deb11u1","1:140.3.0esr-1~deb12u1","1:140.3.0esr-1~deb13u1","1:140.3.1esr-1","1:140.4.0esr-1","1:140.4.0esr-1~deb11u1","1:140.4.0esr-1~deb12u1","1:140.4.0esr-1~deb13u1","1:140.5.0esr-1","1:140.5.0esr-1~deb11u1","1:140.5.0esr-1~deb12u1","1:140.5.0esr-1~deb13u1","1:140.6.0esr-1","1:140.6.0esr-1~deb11u1","1:140.6.0esr-1~deb12u1","1:140.6.0esr-1~deb13u1","1:140.7.0esr-1","1:140.7.0esr-1~deb11u1","1:140.7.0esr-1~deb12u1","1:140.7.0esr-1~deb13u1","1:140.7.1esr-1","1:140.7.1esr-1~deb11u1","1:140.7.1esr-1~deb12u1","1:140.7.1esr-1~deb13u1","1:140.8.0esr-1","1:140.8.0esr-1~deb11u1","1:140.8.0esr-1~deb12u1","1:140.8.0esr-1~deb13u1","1:140.9.0esr-1","1:140.9.0esr-1~deb11u1","1:140.9.0esr-1~deb12u1","1:140.9.0esr-1~deb13u1","1:140.9.1esr-1","1:140.9.1esr-1~deb11u1","1:140.9.1esr-1~deb12u1","1:140.9.1esr-1~deb13u1","1:143.0.1-1","1:144.0.1-1","1:148.0.1-1","1:149.0.2-1","1:152.0-1","1:153.0.1esr-1","1:153.0.3esr-1","1:153.1.0esr-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-1.mga10"}]}],"bundled":31},{"source":"osv","ecosystem":"Mageia:10","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-1.mga10"}]}],"bundled":31},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.15.0-1.mga9"}]}],"bundled":31},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.15.0-1.mga9"}]}],"bundled":31},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.15.0-1.oe2403sp4"}]}],"bundled":11},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.15.0-1.oe2403sp3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el9_8"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el9_8"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el9_8"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el10_2"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el10_2"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el10_2"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_10"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_10"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_10"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.15.0-1.el9_4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.15.0-1.el9_4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.15.0-1.el9_4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.15.0-1.el10_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.15.0-1.el10_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.15.0-1.el10_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.15.0-1.el9_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.15.0-1.el9_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.15.0-1.el9_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.15.0-1.el9_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.15.0-1.el9_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.15.0-1.el9_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_8"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_8"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_8"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_8"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_8"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_8"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_6"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_6"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_6"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_6"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_6"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_6"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_4"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_4"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_4"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_4"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_4"}]}],"bundled":44},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_4"}]}],"bundled":44},{"source":"osv","ecosystem":"Rocky Linux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el9_8"}]}],"bundled":44},{"source":"osv","ecosystem":"Rocky Linux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el10_2"}]}],"bundled":44},{"source":"osv","ecosystem":"Rocky Linux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.16.0-1.el8_10"}]}],"bundled":44},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.13.3.1"}]}],"bundled":143},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.13.3.1"}]}],"bundled":143},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1","1:102.8.0+build2-0ubuntu0.22.04.1","1:102.9.0+build1-0ubuntu0.22.04.1","1:102.10.0+build2-0ubuntu0.22.04.1","1:102.11.0+build1-0ubuntu0.22.04.1","1:102.13.0+build1-0ubuntu0.22.04.1","1:102.15.0+build1-0ubuntu0.22.04.1","1:102.15.1+build1-0ubuntu0.22.04.1","1:115.3.1+build1-0ubuntu0.22.04.2","1:115.4.1+build1-0ubuntu0.22.04.1","1:115.5.0+build1-0ubuntu0.22.04.1","1:115.6.0+build2-0ubuntu0.22.04.1","1:115.8.1+build1-0ubuntu0.22.04.1","1:115.9.0+build1-0ubuntu0.22.04.1","1:115.10.1+build1-0ubuntu0.22.04.1","1:115.11.0+build2-0ubuntu0.22.04.1","1:115.12.0+build3-0ubuntu0.22.04.1","1:115.13.0+build5-0ubuntu0.22.04.1","1:115.15.0+build1-0ubuntu0.22.04.1","1:115.16.0+build2-0ubuntu0.22.04.1","1:115.18.0+build1-0ubuntu0.22.04.1","1:128.12.0+build1-0ubuntu0.22.04.1","1:140.7.1+build1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:115.3.1+build1-0ubuntu1","1:115.4.1+build1-0ubuntu1","1:115.4.3+build1-0ubuntu1","1:115.5.0+build1-0ubuntu1","1:115.5.1+build1-0ubuntu1","1:115.5.2+build2-0ubuntu1","1:115.6.0+build1-0ubuntu1","1:115.6.0+build2-0ubuntu1","1:115.6.1+build1-0ubuntu1","1:115.8.0+build1-0ubuntu1","1:115.8.1+build1+snap2","1:115.8.1+build1+snap3","2:1snap1-0ubuntu1","2:1snap1-0ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1snap1-0ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1snap1-0ubuntu3","2:1snap1-0ubuntu4","2:1snap1-0ubuntu5"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.15.0-1.1"}]}],"bundled":13}],"products":[{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2057805","tags":["Permissions Required"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-86/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-88/","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84641","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-86"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-88"},{"url":"https://github.com/advisories/GHSA-f2hg-25f8-vgfj"},{"url":"https://access.redhat.com/errata/RHSA-2026:70642","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16365","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-75874","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-84119","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-84120","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-84121","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-84122","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-84124","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-84131","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-84143","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-84145","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-84639","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-84640","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-84641","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92005","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92006","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92007","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92008","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92009","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92010","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92011","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92012","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92013","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92014","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92015","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92016","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92017","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92018","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92019","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92020","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92021","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92022","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92023","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92024","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92025","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92026","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92027","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92028","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92029","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92030","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92031","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92032","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92238","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92239","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92240","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503504","tags":["report"]},{"url":"https://bugzilla.redhat.com/2517832","tags":["report"]},{"url":"https://bugzilla.redhat.com/2526753","tags":["report"]},{"url":"https://bugzilla.redhat.com/2526760","tags":["report"]},{"url":"https://bugzilla.redhat.com/2526764","tags":["report"]},{"url":"https://bugzilla.redhat.com/2526765","tags":["report"]},{"url":"https://bugzilla.redhat.com/2526767","tags":["report"]},{"url":"https://bugzilla.redhat.com/2526778","tags":["report"]},{"url":"https://bugzilla.redhat.com/2526781","tags":["report"]},{"url":"https://bugzilla.redhat.com/2527113","tags":["report"]},{"url":"https://bugzilla.redhat.com/2527115","tags":["report"]},{"url":"https://bugzilla.redhat.com/2527116","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533737","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533740","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533741","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533742","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533743","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533747","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533751","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533753","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533757","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533758","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533760","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533762","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533764","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533769","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533770","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533771","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533773","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533774","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533778","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533779","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533781","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533786","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533790","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533791","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533792","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533793","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533797","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533799","tags":["report"]},{"url":"https://bugzilla.redhat.com/2534187","tags":["report"]},{"url":"https://bugzilla.redhat.com/2534197","tags":["report"]},{"url":"https://bugzilla.redhat.com/2534199","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-70642.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:73130","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-73130.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:73971","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2526773","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-73971.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-84641","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0388.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36245","tags":["report"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/140.14.1esr/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/153.1.1esr/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/140.15.0esr/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/153.2.0esr/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-87/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-88/","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3842","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84119","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84120","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84122","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84124","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84640","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3982","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517832","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2526753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2526760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2526764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2526765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2526767","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2526773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2526778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2526781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2527113","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2527115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2527116","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533792","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2534187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2534197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2534199","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70642.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16365","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16365","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-68/#CVE-2026-16365","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-71/#CVE-2026-16365","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-84/#CVE-2026-16365","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/#CVE-2026-16365","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-75874","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75874","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-74/#CVE-2026-75874","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-78/#CVE-2026-75874","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-84/#CVE-2026-75874","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/#CVE-2026-75874","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84119","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-84/#CVE-2026-84119","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/#CVE-2026-84119","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84120","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-84/#CVE-2026-84120","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/#CVE-2026-84120","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84121","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-84/#CVE-2026-84121","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/#CVE-2026-84121","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84122","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-84/#CVE-2026-84122","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/#CVE-2026-84122","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84124","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-82/#CVE-2026-84124","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-84/#CVE-2026-84124","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/#CVE-2026-84124","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84131","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-84/#CVE-2026-84131","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/#CVE-2026-84131","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84143","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-84/#CVE-2026-84143","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/#CVE-2026-84143","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84145","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-84/#CVE-2026-84145","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/#CVE-2026-84145","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84639","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/#CVE-2026-84639","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84640","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/#CVE-2026-84640","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84641","tags":["advisory","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/#CVE-2026-84641","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92005","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92005","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92005","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92005","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92006","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92006","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92006","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92006","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92007","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92007","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92007","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92008","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92008","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92008","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92008","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92009","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92009","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92009","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92009","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92010","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92010","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92010","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92011","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92011","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92011","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92012","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92012","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92012","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92012","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92013","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92013","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92013","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92014","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92014","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92014","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92014","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92015","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92015","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92015","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92015","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92016","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92016","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92016","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92017","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92017","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92017","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92017","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92018","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92018","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92018","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92018","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92019","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92019","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92019","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92019","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92020","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92020","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92020","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92020","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92021","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92021","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92021","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92022","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92022","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92022","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92023","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92023","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92023","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92024","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92024","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92024","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92024","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92025","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92025","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92025","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92025","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92026","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92026","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92026","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92026","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92027","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92027","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92027","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92027","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92028","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92028","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92028","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92028","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92029","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92029","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92029","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92029","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92030","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92030","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92030","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92030","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92031","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92031","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92031","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92031","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92032","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-92/#CVE-2026-92032","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92032","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92238","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92238","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92238","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92239","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92239","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92239","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92240","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92240","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-95/#CVE-2026-92240","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73130.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73971.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:77627","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77627.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:77631","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77631.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:77632","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77632.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:80503","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80503.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:81912","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_81912.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:81913","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_81913.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82122","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82122.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:70642","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:73130","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:73971","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264268-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1271649","tags":["report"]},{"url":"https://bugzilla.suse.com/1274867","tags":["report"]},{"url":"https://bugzilla.suse.com/1278001","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-34703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-75874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84642","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-84641","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-87/#CVE-2026-84641","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-84641","title":"Information disclosure due to malicious IMAP server response","description":"A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.","status":"published","published":"2026-09-01T21:33:07.41Z","modified":"2026-09-02T18:47:17.033Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:20:08.391556Z"}],"euvd":[{"id":"EUVD-2026-69710","description":"A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.","status":"published","published":"2026-09-01T21:33:07Z","modified":"2026-09-02T18:47:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T18:01:14.689075Z"}],"ghsa":[{"id":"GHSA-f2hg-25f8-vgfj","title":"A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a...","description":"A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.","status":"published","published":"2026-09-02T00:31:29Z","modified":"2026-09-02T21:33:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:11:18.49317Z"}],"nvd":[{"id":"CVE-2026-84641","description":"A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.","status":"published","published":"2026-09-01T22:17:19.9Z","modified":"2026-09-03T19:01:11.823Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:12:43.04945Z"}],"osv":[{"id":"DEBIAN-CVE-2026-84641","description":"A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.","status":"published","published":"2026-09-01T22:17:19.9Z","modified":"2026-10-06T16:01:43.668968615Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:46:05.022702Z"},{"id":"OESA-2026-3842","title":"thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\r\n\r\nSecurity Fix(es):\n\nSandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.(CVE-2026-84119)\n\nUse-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.(CVE-2026-84120)\n\nSandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.(CVE-2026-84121)\n\nUse-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, and Firefox ESR 153.2.(CVE-2026-84122)\n\nUse-after-free in the DOM: Core \u0026amp; HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, and Firefox ESR 153.2.(CVE-2026-84124)\n\nPrivilege escalation due to invalid pointer in the Graphics component of Mozilla Firefox. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.(CVE-2026-84131)\n\nInternally found bugs present in Firefox 154, Firefox ESR 153.1 and Firefox ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, and Firefox ESR 153.2.(CVE-2026-84143)\n\nInternally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.(CVE-2026-84145)\n\nTriggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.(CVE-2026-84639)\n\nA maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.(CVE-2026-84640)\n\nA malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.(CVE-2026-84641)","status":"published","published":"2026-09-14T16:34:54Z","modified":"2026-09-13T16:45:47.977085099Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-3982","title":"thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\r\n\r\nSecurity Fix(es):\n\nSandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.(CVE-2026-84119)\n\nUse-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.(CVE-2026-84120)\n\nSandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.(CVE-2026-84121)\n\nUse-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.(CVE-2026-84122)\n\nUse-after-free in the DOM: Core \u0026amp; HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.(CVE-2026-84124)\n\nPrivilege escalation due to invalid pointer in the Graphics component of Mozilla Firefox. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.(CVE-2026-84131)\n\nInternally found bugs present in Firefox 154, Firefox ESR 153.1 and Firefox ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, and Firefox ESR 153.2.(CVE-2026-84143)\n\nInternally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.(CVE-2026-84145)\n\nTriggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.(CVE-2026-84639)\n\nA maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.(CVE-2026-84640)\n\nA malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.(CVE-2026-84641)","status":"published","published":"2026-09-20T13:23:47Z","modified":"2026-09-20T13:30:28.275147666Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"RHSA-2026:70642","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-09-24T10:15:04Z","modified":"2026-10-16T10:24:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:73130","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-09-30T10:17:53Z","modified":"2026-10-16T10:25:07Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:73971","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-10-01T10:21:10Z","modified":"2026-10-16T10:25:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:77627","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-10-08T10:20:23Z","modified":"2026-10-14T10:31:10Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:77631","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-10-08T10:20:24Z","modified":"2026-10-14T10:31:11Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:77632","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-10-08T10:20:25Z","modified":"2026-10-14T10:31:11Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:80503","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-10-14T10:31:44Z","modified":"2026-10-14T10:48:13.218380855Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:81912","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-10-14T10:32:37Z","modified":"2026-10-16T10:26:59Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:81913","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-10-14T10:32:38Z","modified":"2026-10-16T10:26:59Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:82122","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2026-10-14T10:32:41Z","modified":"2026-10-16T10:27:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:70642","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365)\n\n* firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874)\n\n* firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121)\n\n* firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145)\n\n* firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2026-84120)\n\n* firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131)\n\n* firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-84124)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2026-84122)\n\n* firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143)\n\n* thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639)\n\n* thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641)\n\n* thunderbird: One byte overflow read in mail parser (CVE-2026-84640)\n\n* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)\n\n* firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)\n\n* firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)\n\n* firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)\n\n* firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)\n\n* firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-92028)\n\n* firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)\n\n* firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)\n\n* firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)\n\n* firefox: thunderbird: Sandbox escape in the DOM: Core \u0026 HTML component (CVE-2026-92018)\n\n* firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)\n\n* firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)\n\n* firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component (CVE-2026-92030)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007)\n\n* firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025)\n\n* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029)\n\n* firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023)\n\n* thunderbird: Out-of-bounds read in IMAP response parser (CVE-2026-92240)\n\n* thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line (CVE-2026-92239)\n\n* thunderbird: Thunderbird: Memory safety violations via maliciously crafted mail headers (CVE-2026-92238)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-25T06:09:18.596271Z","modified":"2026-09-25T06:30:02.654546591Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:73130","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365)\n\n* firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874)\n\n* firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121)\n\n* firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145)\n\n* firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2026-84120)\n\n* firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131)\n\n* firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-84124)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2026-84122)\n\n* firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143)\n\n* thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639)\n\n* thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641)\n\n* thunderbird: One byte overflow read in mail parser (CVE-2026-84640)\n\n* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)\n\n* firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)\n\n* firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)\n\n* firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)\n\n* firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)\n\n* firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-92028)\n\n* firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)\n\n* firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)\n\n* firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)\n\n* firefox: thunderbird: Sandbox escape in the DOM: Core \u0026 HTML component (CVE-2026-92018)\n\n* firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)\n\n* firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)\n\n* firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component (CVE-2026-92030)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007)\n\n* firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025)\n\n* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029)\n\n* firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023)\n\n* thunderbird: Out-of-bounds read in IMAP response parser (CVE-2026-92240)\n\n* thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line (CVE-2026-92239)\n\n* thunderbird: Thunderbird: Memory safety violations via maliciously crafted mail headers (CVE-2026-92238)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-30T12:10:38.243683Z","modified":"2026-09-30T12:45:02.462694871Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:73971","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365)\n\n* firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874)\n\n* firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121)\n\n* firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145)\n\n* firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2026-84120)\n\n* firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131)\n\n* firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-84124)\n\n* firefox: Use-after-free in the Audio/Video component (CVE-2026-84122)\n\n* firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143)\n\n* thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639)\n\n* thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641)\n\n* thunderbird: One byte overflow read in mail parser (CVE-2026-84640)\n\n* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)\n\n* firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)\n\n* firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)\n\n* firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)\n\n* firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)\n\n* firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-92028)\n\n* firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)\n\n* firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)\n\n* firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)\n\n* firefox: thunderbird: Sandbox escape in the DOM: Core \u0026 HTML component (CVE-2026-92018)\n\n* firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)\n\n* firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)\n\n* firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component (CVE-2026-92030)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007)\n\n* firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025)\n\n* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029)\n\n* firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023)\n\n* thunderbird: Out-of-bounds read in IMAP response parser (CVE-2026-92240)\n\n* thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line (CVE-2026-92239)\n\n* thunderbird: Thunderbird: Memory safety violations via maliciously crafted mail headers (CVE-2026-92238)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-01T18:01:23.76142Z","modified":"2026-10-01T18:24:43.101526169Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-84641","description":"A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.","status":"published","published":"2026-09-01T22:17:00Z","modified":"2026-10-17T13:01:12.702397947Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:57:24.828975Z"},{"id":"ALSA-2026:70642","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365)\n  * firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874)\n  * firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121)\n  * firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145)\n  * firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2026-84120)\n  * firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131)\n  * firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-84124)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2026-84122)\n  * firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143)\n  * thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639)\n  * thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641)\n  * thunderbird: One byte overflow read in mail parser (CVE-2026-84640)\n  * firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)\n  * firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)\n  * firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)\n  * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)\n  * firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)\n  * firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-92028)\n  * firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)\n  * firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)\n  * firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)\n  * firefox: thunderbird: Sandbox escape in the DOM: Core \u0026 HTML component (CVE-2026-92018)\n  * firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)\n  * firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)\n  * firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)\n  * firefox: thunderbird: Mitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component (CVE-2026-92030)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007)\n  * firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025)\n  * firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029)\n  * firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023)\n  * thunderbird: Out-of-bounds read in IMAP response parser (CVE-2026-92240)\n  * thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line (CVE-2026-92239)\n  * thunderbird: Thunderbird: Memory safety violations via maliciously crafted mail headers (CVE-2026-92238)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-23T00:00:00Z","modified":"2026-10-29T11:30:22.694291447Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:73130","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365)\n  * firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874)\n  * firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121)\n  * firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145)\n  * firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2026-84120)\n  * firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131)\n  * firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-84124)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2026-84122)\n  * firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143)\n  * thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639)\n  * thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641)\n  * thunderbird: One byte overflow read in mail parser (CVE-2026-84640)\n  * firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)\n  * firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)\n  * firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)\n  * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)\n  * firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)\n  * firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-92028)\n  * firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)\n  * firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)\n  * firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)\n  * firefox: thunderbird: Sandbox escape in the DOM: Core \u0026 HTML component (CVE-2026-92018)\n  * firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)\n  * firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)\n  * firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)\n  * firefox: thunderbird: Mitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component (CVE-2026-92030)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007)\n  * firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025)\n  * firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029)\n  * firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023)\n  * thunderbird: Out-of-bounds read in IMAP response parser (CVE-2026-92240)\n  * thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line (CVE-2026-92239)\n  * thunderbird: Thunderbird: Memory safety violations via maliciously crafted mail headers (CVE-2026-92238)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-29T00:00:00Z","modified":"2026-10-29T11:30:51.233498826Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:73971","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365)\n  * firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874)\n  * firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121)\n  * firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145)\n  * firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2026-84120)\n  * firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131)\n  * firefox: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-84124)\n  * firefox: Use-after-free in the Audio/Video component (CVE-2026-84122)\n  * firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143)\n  * thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639)\n  * thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641)\n  * thunderbird: One byte overflow read in mail parser (CVE-2026-84640)\n  * firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)\n  * firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)\n  * firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)\n  * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)\n  * firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)\n  * firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-92028)\n  * firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)\n  * firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012)\n  * firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014)\n  * firefox: thunderbird: Sandbox escape in the DOM: Core \u0026 HTML component (CVE-2026-92018)\n  * firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021)\n  * firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005)\n  * firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008)\n  * firefox: thunderbird: Mitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component (CVE-2026-92030)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007)\n  * firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025)\n  * firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029)\n  * firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023)\n  * thunderbird: Out-of-bounds read in IMAP response parser (CVE-2026-92240)\n  * thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line (CVE-2026-92239)\n  * thunderbird: Thunderbird: Memory safety violations via maliciously crafted mail headers (CVE-2026-92238)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-30T00:00:00Z","modified":"2026-10-29T11:02:29.617803483Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"MGASA-2026-0388","title":"Updated thunderbird packages fix security vulnerabilities","description":"Uninitialized memory in MIME parsing. (CVE-2026-84639)\nOne byte overflow read in mail parser. (CVE-2026-84640)\nInformation disclosure due to malicious IMAP server response.\n(CVE-2026-84641)\nCalendar invitation attachments could launch local executables.\n(CVE-2026-84637)\nAllowed UNC hostnames for attachments interpreted as a regular\nexpression. (CVE-2026-84642)\nSandbox escape in the Remote Settings Client component. (CVE-2026-75874)\nPrivilege escalation in the DOM: Workers component. (CVE-2026-16365)\nUse-after-free in the JavaScript: GC component. (CVE-2026-84118)\nSandbox escape due to use-after-free in the DOM: Navigation component.\n(CVE-2026-84119)\nUse-after-free in the Audio/Video component. (CVE-2026-84120)\nSandbox escape due to use-after-free in the DOM: Security component.\n(CVE-2026-84121)\nUse-after-free in the Audio/Video component. (CVE-2026-84122)\nPrivilege escalation due to use-after-free in the Graphics: WebGPU\ncomponent. (CVE-2026-84123)\nUse-after-free in the DOM: Core \u0026 HTML component. (CVE-2026-84124)\nUse-after-free in the DOM: Core \u0026 HTML component. (CVE-2026-84125)\nPrivilege escalation in the DOM: Navigation component. (CVE-2026-16371)\nPrivilege escalation in the Application Update component.\n(CVE-2026-74952)\nSite isolation issue in the DOM: Navigation component. (CVE-2026-84129)\nInformation disclosure in the Graphics: WebGPU component.\n(CVE-2026-84130)\nPrivilege escalation due to invalid pointer in the Graphics component.\n(CVE-2026-84131)\nInformation disclosure in the Networking: HTTP component.\n(CVE-2026-84132)\nSite isolation issue in the DOM: Push Subscriptions component.\n(CVE-2026-84133)\nOther issue in the Profile Backup component. (CVE-2026-84134)\nOther issue in the DOM: Navigation component. (CVE-2026-84136)\nSpoofing issue in the DOM: Core \u0026 HTML component. (CVE-2026-84137)\nClickjacking issue in the DOM: Events component. (CVE-2026-84139)\nSite isolation issue in the DOM: Navigation component. (CVE-2026-84140)\nInteger overflow in the Graphics: ImageLib component. (CVE-2026-84141)\nInternally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2\nand Thunderbird ESR 140.15. (CVE-2026-84143)\nInternally found bugs fixed in Thunderbird 155 and Thunderbird ESR\n153.2. (CVE-2026-84144)\nInternally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2\nand Thunderbird ESR 140.15. (CVE-2026-84145)\n","status":"published","published":"2026-09-09T18:01:33Z","modified":"2026-09-09T18:27:30.09117019Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11678-1","title":"MozillaThunderbird-140.15.0-1.1 on GA media","description":"These are all security issues fixed in the MozillaThunderbird-140.15.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-04T00:00:00Z","modified":"2026-09-05T09:45:03.951698104Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"SUSE-SU-2026:4268-1","title":"Security update for MozillaThunderbird","description":"This update for MozillaThunderbird fixes the following issues:\n\nMozilla Thunderbird 153.2:\n\n  * fixed: Deleting an Exchange account retained the outgoing\n    server settings \n  * fixed: Thunderbird upgrade disabled Settings menu for\n    versions before macOS 13 \n  * fixed: Windows jump list menu no longer functioned correctly\n  * fixed: Security fixes MFSA 2026-88 (bsc#1278001):\n  * CVE-2026-84639 \n    Uninitialized memory in MIME parsing\n  * CVE-2026-84640 \n    One byte overflow read in mail parser\n  * CVE-2026-84641 \n    Information disclosure due to malicious IMAP server response\n  * CVE-2026-84637 \n    Calendar invitation attachments could launch local\n    executables\n  * CVE-2026-84642 \n    Allowed UNC hostnames for attachments interpreted as a\n    regular expression\n  * CVE-2026-75874 \n    Sandbox escape in the Remote Settings Client component\n  * CVE-2026-84118 \n    Use-after-free in the JavaScript: GC component\n  * CVE-2026-84119 \n    Sandbox escape due to use-after-free in the DOM: Navigation\n    component\n  * CVE-2026-84120 \n    Use-after-free in the Audio/Video component\n  * CVE-2026-84121 \n    Sandbox escape due to use-after-free in the DOM: Security\n    component\n  * CVE-2026-84122 \n    Use-after-free in the Audio/Video component\n  * CVE-2026-84123 \n    Privilege escalation due to use-after-free in the Graphics:\n    WebGPU component\n  * CVE-2026-84124 \n    Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-84125 \n    Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-74952 \n    Privilege escalation in the Application Update component\n  * CVE-2026-84129 \n    Site isolation issue in the DOM: Navigation component\n  * CVE-2026-84130 \n    Information disclosure in the Graphics: WebGPU component\n  * CVE-2026-84131 \n    Privilege escalation due to invalid pointer in the Graphics\n    component\n  * CVE-2026-84132 \n    Information disclosure in the Networking: HTTP component\n  * CVE-2026-84133 \n    Site isolation issue in the DOM: Push Subscriptions component\n  * CVE-2026-84134 \n    Other issue in the Profile Backup component\n  * CVE-2026-84136 \n    Other issue in the DOM: Navigation component\n  * CVE-2026-84137 \n    Spoofing issue in the DOM: Core \u0026 HTML component\n  * CVE-2026-84139 \n    Clickjacking issue in the DOM: Events component\n  * CVE-2026-84140 \n    Site isolation issue in the DOM: Navigation component\n  * CVE-2026-84141 \n    Integer overflow in the Graphics: ImageLib component\n  * CVE-2026-84143 \n    Internally found bugs fixed in Thunderbird 155, Thunderbird\n    ESR 153.2 and Thunderbird ESR 140.15\n  * CVE-2026-84144 \n    Internally found bugs fixed in Thunderbird 155 and\n    Thunderbird ESR 153.2\n  * CVE-2026-84145 \n    Internally found bugs fixed in Thunderbird 155, Thunderbird\n    ESR 153.2 and Thunderbird ESR 140.15\n\n- Mozilla Thunderbird 153.1.1\n\n  * fixed: Thunderbird upgrade disabled composition toolbar\n  * fixed: Draft was not preserved when encrypted message send\n    failed \n  * fixed: Account Hub prompted for calendar credentials after\n    successful login \n  * fixed: Thunderbird crash fixes \n  * fixed: Folder compaction showed incorrect disk space recovery\n    estimates \n  * fixed: Thunderbird failed to launch GPU process \n\n- Mozilla Thunderbird 153.1\n\n  * fixed: Autoscroll icon was missing directional arrows in\n    scrollable messages \n  * fixed: Security fixes MFSA 2026-80 (bsc#1274867):\n  * CVE-2026-74934 \n    Site isolation issue in the Graphics: CanvasWebGL component\n  * CVE-2026-74935 \n    Privilege escalation in the DOM: Networking component\n  * CVE-2026-74936 \n    Use-after-free in the JavaScript: WebAssembly component\n  * CVE-2026-74937 \n    Use-after-free in the JavaScript: GC component\n  * CVE-2026-74938 \n    Mitigation bypass in the JavaScript: GC component\n  * CVE-2026-74939 \n    Privilege escalation in the DOM: Navigation component\n  * CVE-2026-74940 \n    Use-after-free in the Graphics: Text component\n  * CVE-2026-74941 \n    Privilege escalation in the Graphics: CanvasWebGL component\n  * CVE-2026-74942 \n    Privilege escalation in the Remote Settings Client component\n  * CVE-2026-74943 \n    Use-after-free in the Graphics: ImageLib component\n  * CVE-2026-74944 \n    Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-74945 \n    Information disclosure in the Graphics: Text component\n  * CVE-2026-74946 \n    Privilege escalation due to incorrect boundary conditions in\n    the Graphics: CanvasWebGL component\n  * CVE-2026-74947 \n    Privilege escalation due to invalid pointer in the Graphics\n    component\n  * CVE-2026-74948 \n    Information disclosure in the Graphics component\n  * CVE-2026-74949 \n    Privilege escalation due to use-after-free in the Graphics:\n    Canvas2D component\n  * CVE-2026-74950 \n    Privilege escalation in the Downloads API component\n  * CVE-2026-74953 \n    Privilege escalation in the Networking: Cookies component\n  * CVE-2026-74954 \n    Information disclosure due to side-channel in the Storage:\n    Cache API component\n  * CVE-2026-74955 \n    Privilege escalation in the Request Handling component\n  * CVE-2026-74956 \n    Same-origin policy bypass in the DOM: Service Workers\n    component\n  * CVE-2026-74957 \n    Mitigation bypass in the Safe Browsing component\n  * CVE-2026-74958 \n    Information disclosure in the WebRTC component\n  * CVE-2026-74959 \n    Mitigation bypass in the Storage: Cache API component\n  * CVE-2026-74960 \n    Site isolation issue in the WebExtensions component\n  * CVE-2026-74961 \n    Side-channel in the Web Audio component\n  * CVE-2026-74962 \n    Site isolation issue in the Networking: Cookies component\n  * CVE-2026-74963 \n    Same-origin policy bypass in the Networking: Cookies\n    component\n  * CVE-2026-74964 \n    Integer overflow in the Graphics component\n  * CVE-2026-74965 \n    Privilege escalation in the Shell Integration component\n  * CVE-2026-74966 \n    Information disclosure in the Form Autofill component\n  * CVE-2026-74967 \n    Same-origin policy bypass in the Audio/Video: Playback\n    component\n  * CVE-2026-74968 \n    Site isolation issue in the Graphics: WebRender component\n  * CVE-2026-74969 \n    Use-after-free in the Layout: Text and Fonts component\n  * CVE-2026-74970 \n    Site isolation issue in the Graphics component\n  * CVE-2026-74971 \n    Information disclosure in the DOM: UI Events \u0026 Focus Handling\n    component\n  * CVE-2026-74972 \n    Information disclosure in the DOM: Push Subscriptions\n    component\n  * CVE-2026-74973 \n    Race condition, use-after-free in the Graphics component\n  * CVE-2026-74974 \n    Same-origin policy bypass in the Graphics: ImageLib component\n  * CVE-2026-74976 \n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-74977 \n    Integer overflow in the Graphics component\n  * CVE-2026-74978 \n    Clickjacking issue in the Widget component\n  * CVE-2026-74979 \n    Mitigation bypass in the Add-ons Manager component\n  * CVE-2026-74981 \n    Site isolation issue in the Audio/Video: Web Codecs component\n  * CVE-2026-74982 \n    Denial-of-service in the Widget component\n  * CVE-2026-74983 \n    Mitigation bypass in the Data Loss Prevention component\n  * CVE-2026-74984 \n    Race condition in the JavaScript Engine component\n  * CVE-2026-74985 \n    Privilege escalation in the Enterprise Policies component\n  * CVE-2026-74986 \n    Site isolation issue in the CSS Parsing and Computation\n    component\n  * CVE-2026-74987 \n    Internally found bugs fixed in Thunderbird ESR 140.14,\n    Thunderbird ESR 153.1 and Thunderbird 154\n  * CVE-2026-74988 \n    Internally found bugs fixed in Thunderbird ESR 153.1 and\n    Thunderbird 154\n  * CVE-2026-74990 \n    Internally found bugs fixed in Thunderbird ESR 140.14,\n    Thunderbird ESR 153.1 and Thunderbird 154\n\n- Mozilla Thunderbird 153.0.3\n\n  * fixed: Dragging attachments from Local Folders to the desktop\n    failed on Windows \n  * fixed: IMAP tags did not sync automatically across clients\n  * fixed: DisablePasswordReveal policy failed to prevent\n    revealing saved passwords \n  * fixed: Thunderbird could crash when saving a sent Exchange\n    message \n\n- Mozilla Thunderbird 153.0.2\n\n  * changed: Restored previous Yahoo sign-in flow to improve\n    login reliability \n  * fixed: Edit Calendar dialog opened without a window title\n  * fixed: Thunderbird could crash when going offline with active\n    IMAP connection \n\n- Mozilla Thunderbird 153.0.1\n\n  * changed: There are no Thunderbird changes requiring release\n    notes in this release\n\n- Mozilla Thunderbird 153\n\n  MFSA 2026-71 (bsc#1271649):\n  * new: Visual signatures can be added to PDF attachments opened\n    in Thunderbird \n  * new: 'Copy Message Link' and 'Copy News Link' added to header\n    pane 'More actions' \n  * new: Accessiblity is improved in various tree views\n  * new: Added 'Archive' action to mail notifications\n  * new: Add 'Show Full Path' folder pane option for compact view\n    modes \n  * new: Unified folders now display account color indicator with\n    account name tooltip \n  * new: Folder copy enabled within mail server accounts and\n    local folders \n  * new: 'Reset Folder Order' option added to folder pane to\n    reset custom folder sorting \n  * new: Add `mail.useLocalizedFolderNames' to toggle special\n    folder name localization \n  * new: 'Favorites' added as destination for 'Move To' and\n    'File' buttons \n  * new: Composer now shows a warning if user's configured\n    OpenPGP key expires soon \n  * new: Enabled configuration of preferred OpenPGP keyserver via\n    the UI \n  * new: Add `mail.openpgp.load_untested_gpgme_version` to load\n    untested GPGME version \n  * new: Added support for generating Unobtrusive Signatures\n    (OpenPGP) \n  * new: Implemented option to show only messages without any tag\n  * new: Message body search enabled for OpenPGP and S/MIME\n    encrypted messages \n  * new: SecurityDevices enabled in enterprise policies\n  * new: Enable support for DNS over HTTPS \n  * new: OAuth login for mail accounts now opens in default web\n    browser \n  * new: Thundermail services can now be used without installing\n    an add-on \n  * new: OAuth responses now verify issuer fields and reject\n    missing required issuers \n  * new: Enable the 'Sign in with Thundermail' button in Account\n    Hub \n  * new: Account hub is opened on the first run of Thunderbird\n  * new: Account Hub email manual config option added\n  * new: Enable Thundermail OAuth sign-in with account auto-\n    configuration \n  * new: Address book cards can be copied to the clipboard as\n    vCard \n  * new: Enable exporting selected address book cards \n  * new: Custom Accent Color can be chosen in Appearance Settings\n  * new: Enable support for Microsoft Exchange via Exchange Web\n    Services \n  * new: Calendar month/multiweek views are now scrollable with\n    touch screen \n  * new: Tasks can be sorted by created or modified date\n  * new: PDF pages can be reorganized directly in the PDF viewer\n  * changed: 'Copy Message Location' removed from mail context\n    menu \n  * changed: Read folders are now removed from Unread Folders\n    view \n  * changed: Special folders are now localized based on a\n    restricted set of names \n  * changed: OpenPGP public key no longer attached by default in\n    signed-only messages \n  * changed: Address books are now created in Account Hub\n  * changed: Yahoo, AT\u0026T, AOL accounts migrated to OAuth 2.0 with\n    PKCE for improved security \n  * changed: GMail OAuth updated to use PKCE \n  * changed: Skype has been retired and therefore dropped from\n    Address book IM selection \n  * changed: Removed pref `default_supports_diskspace.{HOST}`\n  * changed: Removed pref `default_offline_support_level.{HOST}`\n  * changed: Removed Odnoklassniki chat setup and directed users\n    to XMPP configuration \n  * changed: Use of the string 'Junk' has been replaced with\n    'Spam' \n  * changed: Updated about:rights to replace local with hosted\n    url \n  * changed: Stop shipping 32-bit Linux x86 binaries\n  * changed: 'Hide completed tasks' now also hides cancelled\n    tasks \n  * changed: Stop shipping 32-bit Linux x86 binaries\n  * fixed: Thunderbird could crash when parsing message state\n  * fixed: The English string for the Angry emoji was incorrectly\n    named as the Yell emoji \n  * fixed: Notification sounds did not respect operating system's\n    do-not-disturb mode \n  * fixed: Non-English localized Thunderbird created English\n    special folders on first start \n  * fixed: Copying text from some error alerts was not possible\n  * fixed: Fastmail CalDAV app password access failed due to\n    forced OAuth regression \n  * fixed: Thunderbird could crash in server subscription logic\n  * fixed: Could not distinguish folders with same name in\n    'Recent Destinations' and 'Favorites' \n  * fixed: Donation banner stole focus when Thunderbird was\n    running in the background \n  * fixed: Unknown command-line arguments passed to Thunderbird\n    did not print warning \n  * fixed: Thunderbird could crash when processing new incoming\n    messages \n  * fixed: Spam messages triggered new mail notifications before\n    being moved to Spam folder \n  * fixed: Web pages with bad certificates displayed as blank\n  * fixed: Memory leak after opening New Window from folder pane\n    context menu \n  * fixed: Importing a vCard only displayed VCF files in the file\n    picker \n  * fixed: Calendar view tabs were not properly keyboard\n    accessible \n  * fixed: Ctrl+S did not save PDF attachments opened in\n    Thunderbird tabs \n  * fixed: TLS errors incorrectly reported all unknown failures\n    as untrusted certificates \n  * fixed: Thunderbird could crash when copying an empty list of\n    messages \n  * fixed: Incorrect roaming data directory caused regression on\n    Windows and macOS \n  * fixed: Changing to new drafts folder and then back did not\n    correctly restore the folder \n  * fixed: Message headers were re-downloaded at every startup\n  * fixed: Old IMAP profile migration deleted INBOX and other\n    mailbox files \n  * fixed: 'Search Messages...' dialog could not be opened\n    outside the email tab \n  * fixed: Option did not exist to create new address book under\n    File -\u003e New \n  * fixed: Newly created folder was missing under 'Recent' when\n    moving a message \n  * fixed: Could not compose new message if the folder pane was\n    empty \n  * fixed: 'Delete' was missing from context menu when multiple\n    IMAP folders were selected \n  * fixed: Compacting multiple folders failed and did not compact\n  * fixed: Shift-click for 'Edit' button in drafts header view\n    did not work \n  * fixed: 'Replace All' in Compose did not update plain text\n    until dialog closed \n  * fixed: Status bar messages displayed unlocalized folder names\n    or IMAP mailbox names \n  * fixed: Saved email filenames were not not always cross-\n    platform safe \n  * fixed: Space bar did not scroll in PDF attachments opened\n    from emails \n  * fixed: Folder location widget used non-localised name\n  * fixed: Empty confirmation dialog when more messages opened in\n    tabs than `mailnews.open_tab_warning` \n  * fixed: Removing tags from IMAP messages could fail and tags\n    reappeared after refresh \n  * fixed: Toggling dark message mode did not restore focus and\n    scroll position \n  * fixed: 'Show remote content' did not display remote content\n    for EML message \n  * fixed: Emoji sequences were not properly handled in subject\n    lines \n  * fixed: 'Delete' button in unified toolbar could delete\n    attachments instead of message \n  * fixed: 'Repair text encoding' could duplicate recipient and\n    attachments \n  * fixed: Some IMAP emails showed current time instead of\n    correct received date \n  * fixed: Deleting a single message in folder using 'Group by\n    Sort' failed after CTRL+A \n  * fixed: New newsgroups were not added in alphabetical order by\n    default \n  * fixed: Sorting by threads only brought threads with unread\n    top messages to the top \n  * fixed: News message marked read after NNTP error prevented\n    retrieval from server \n  * fixed: 'Recent destinations' submenu was not sorted by time\n    of modification \n  * fixed: Account column could display incorrect account name\n  * fixed: 'Tag' submenu of mail context menu could be populated\n    incorrectly \n  * fixed: Unified archive subfolders could show wrong names and\n    no messages \n  * fixed: Moving saved search/virtual folder under IMAP could\n    fail \n  * fixed: New Folder dialog allowed invalid folder creation\n    without a selected parent folder \n  * fixed: New/unread messages in collapsed thread were not\n    obvious enough \n  * fixed: Pressing Delete on Trash folder could remove it\n    without confirmation \n  * fixed: Renaming of a 'unified folder' created a duplicate\n  * fixed: Clicking on a folder in the folder pane did not always\n    open folder \n  * fixed: Messages nested deeper than 255 levels disappeared\n    from threading view \n  * fixed: Performing Delete followed by Undo on thread parent\n    message could corrupt view \n  * fixed: Single messages still appeared collapsible after\n    thread members were deleted \n  * fixed: Updated threads remained misordered until folder\n    refresh or resort \n  * fixed: Global search failed to display inaccessible messages\n    found in local folders \n  * fixed: Numeric subfolders were sorted alphabetically instead\n    of naturally \n  * fixed: Virtual folder folder-picker showed unlabeled IM\n    account as selectable folder \n  * fixed: Some folders showed new mail count prior to receiving\n    mail \n  * fixed: Menu Bar -\u003e View contained duplicate accelerator keys\n  * fixed: Unified toolbar Spam button did not switch to 'Not\n    Spam' when spam message selected \n  * fixed: Warning was not logged if\n    `mail.openpgp.alias_rules_file` file did not exist\n  * fixed: Not all headers were signed when creating digitally\n    signed OpenPGP email \n  * fixed: When configuring external GnuPG, user was not promted\n    to import public key \n  * fixed: 'Open and Show' for OpenPGP-signed message (.eml) did\n    not work \n  * fixed: Invalidly signed unencrypted emails were indicated as\n    worse than unsigned ones \n  * fixed: Reason for revoked certificate was not shown\n  * fixed: Apple Mail OpenPGP emails failed to decrypt due to\n    hidden recipient key ID \n  * fixed: OpenPGP import of public key with experimental packets\n    failed with unclear error \n  * fixed: Opening messages with OpenPGP keys was slow and\n    blocked the UI for large keyrings \n  * fixed: OpenPGP key refresh failed when fingerprint lookup\n    returned multiple results \n  * fixed: Encrypted Gmail CSE emails with outer opaque S/MIME\n    were not readable \n  * fixed: Invalid S/MIME encryption certificate caused\n    misleading send errors \n  * fixed: 'Search Messages' search did not finish due to\n    unparsable local folders \n  * fixed: Search results showed older irrelevant emails before\n    newer exact matches \n  * fixed: Filter search on Body missed draft messages containing\n    German umlauts \n  * fixed: Esc cleared quick filter pin after changing folder\n  * fixed: Thunderbird could crash during local message search\n  * fixed: Replying could fail with\n    `mailnews.reply_quoting_selection.multi_word` set false\n  * fixed: Drag-drop of unselected contact inserted wrong or no\n    email address \n  * fixed: Changing identity in compose window caused modified\n    draft not to be saved \n  * fixed: Shift-click 'Compose Message To' on 'mailto' link did\n    not open in plain text \n  * fixed: Reply with selected text lost formatting for HTML\n    messages containing \u0026lt;/pre\u0026gt; \n  * fixed: Multipart/related attachments were not preserved when\n    editing or forwarding \n  * fixed: Forwarded malformed MIME email had empty body and\n    extra attachment \n  * fixed: Message compose window was removed from Task Bar after\n    saving as draft or template \n  * fixed: Dragging email address between compose windows failed\n    to add recipients \n  * fixed: Thunderbird could crash when using Find and Replace\n    All \n  * fixed: Compose with PDF attachments opened PDFs instead of\n    creating a new email \n  * fixed: Multiple saves while using 'Options' -\u003e 'Send a Copy'\n    resulted in multiple copies \n  * fixed: Search for 'Attachment' in Settings menu did not find\n    'Files and Attachments' \n  * fixed: Add-on account creation did not work with Account Hub\n  * fixed: Owl install did not show link to website in Account\n    Hub \n  * fixed: Username field did not appear in Account Hub when\n    exchange authentication failed \n  * fixed: Account Hub advanced config setup did not include\n    default outgoing config \n  * fixed: Disabled inputs could be toggled in Account Hub\n    address book \n  * fixed: Users could not disable spinning overlay in Account\n    Hub for email \n  * fixed: Account Hub local address book creation could continue\n    with blank name \n  * fixed: Account Hub email success messages were not always\n    accurate about config source \n  * fixed: Calendar/address book sections were shown in Account\n    Hub when there were none \n  * fixed: New password-based Exchange accounts failed to save\n    passwords in login manager \n  * fixed: Account hub showed connection security instead of\n    actual authentication method \n  * fixed: New identity dialog lacked reply-matching and end-to-\n    end encryption settings \n  * fixed: Thunderbird could fail to shut down cleanly during\n    active OAuth requests \n  * fixed: Account Hub kept OAuth selected after changing to\n    hostname without OAuth support \n  * fixed: Account Hub autodetect wrongly prompted for a password\n    when auth was unavailable \n  * fixed: Interrupted external OAuth2 setup required restarting\n    Thunderbird \n  * fixed: The default account could be reset after restart if\n    uninitialized \n  * fixed: Virtual folders did not update correctly for filtered\n    POP3 messages \n  * fixed: 'Copy Message to' action in a newsgroup filter did not\n    work \n  * fixed: Thunderbird could crash while importing mail thread\n  * fixed: Thunderbird did not clearly fail when importing\n    profile from a bad source \n  * fixed: Thunderbird could not import profile located at the\n    top level of zip file \n  * fixed: 'Any Number' was unavailable in address book search\n    with 'Match all of the following' \n  * fixed: Contact not found in Advanced Address Book Search if\n    phone number had a period \n  * fixed: Thunderbird did not display contact photos in WebP\n    format from CardDAV servers \n  * fixed: Opening a vCard (.vcf) from file manager or CLI did\n    not work in some cases \n  * fixed: Redirected CardDAV URLs resolved relative URLs against\n    the wrong host \n  * fixed: Installations from Microsoft Store did not open when\n    clicking 'mailto:' links \n  * fixed: Windows new message notification click did not bring\n    Thunderbird to foreground \n  * fixed: Microsoft Store installs did not open when clicking\n    'news://' link or .eml file \n  * fixed: Using thunderbird -compose with double quotes made\n    last email address invalid \n  * fixed: Clicking the backspace icon in the quick filter field\n    cleared the input field \n  * fixed: Subfolder kept stale accessibility unread count after\n    unread messages were deleted \n  * fixed: Moving virtual folder within maildir based IMAP or\n    local folder could fail \n  * fixed: Thunderbird could crash when completing folder\n    copy/move \n  * fixed: 'Edit as New Message' and inline 'Forward' not\n    possible with PGP-signed messages \n  * fixed: Various MIME improvements \n  * fixed: Forwarding some Apple Mail messages incorrectly\n    attached inline text as a file \n  * fixed: Thunderbird could crash when marking all messages as\n    read \n  * fixed: Auto-compaction could corrupt database and cause\n    crashes during syncs \n  * fixed: 'news:' URIs without specific server had incorrect\n    format displayed in status bar \n  * fixed: 'Mark' -\u003e 'All Read' affected newsgroup messages that\n    had not been fetched yet \n  * fixed: Thunderbird could not reconnect to newsgroups after\n    connection loss until restarted \n  * fixed: Sending a newsgroup post appeared successful when it\n    had actually failed \n  * fixed: Saving a new draft retained superceded version\n  * fixed: Thunderbird hung when auto-checking multiple accounts\n    for new messages \n  * fixed: Spam not checked with\n    `mail.server.default.check_all_folders_for_new` on\n  * fixed: Startup could be slow with large number of folders not\n    using subscriptions \n  * fixed: Saved search in unified folder resulted in server\n    error \n  * fixed: Thunderbird did not report refused POP3 connection\n  * fixed: Remove message body retention policy was not\n    functional \n  * fixed: POP3 could stop downloading mail until restart\n  * fixed: With auto-mark-read disabled, large mail still marked\n    as read during load delay \n  * fixed: IMAP 'Show only subscribed folders' could not be\n    changed without restart \n  * fixed: POP3 deadlocked when server went silent without\n    closing socket \n  * fixed: Thunderbird could crash when mail folder was renamed\n    or moved \n  * fixed: NNTP server with invalid TLS certificate could not be\n    added to certificate exceptions \n  * fixed: Cancelled message send could not be retried and hung\n    with SMTP timeout errors \n  * fixed: Corrupted NNTP account data caused excessive memory\n    use and startup crash \n  * fixed: Multiple selected IMAP folders could not be moved or\n    deleted together \n  * fixed: Non-Latin IMAP keywords were lowercased and encoded\n    incorrectly as MUTF-7 \n  * fixed: Message tags were lost when moving folder from local\n    folder to IMAP folder \n  * fixed: Removing a chat account threw an exception and failed\n    to clear the UI \n  * fixed: Enterprise policy use not indicated in\n    about:preferences with link to about:policies \n  * fixed: Language field in settings was empty after restart in\n    Troubleshoot Mode \n  * fixed: Primary Password policy was detected but not enforced\n    for saved account passwords \n  * fixed: Archived RSS feed messages were sent to the archive\n    folder of default identity \n  * fixed: Broken feed icon could prevent updating of feeds\n  * fixed: Task reminders could fail for tasks without end dates\n    or with shifted due dates \n  * fixed: Calendar did not alert user for connection issues\n  * fixed: Copying one recurring event occurrence failed to set\n    the date when pasted \n  * fixed: Could not copy an event in multiweek or month view by\n    drag-and-drop \n  * fixed: Duplicate attendees were added to invitations instead\n    of being filtered out \n  * fixed: Calendar discovery with certificate error displayed\n    multiple exceptions \n  * fixed: It was not possible to create date-only all-day tasks\n  * fixed: Task percentage complete was not preserved separately\n    from status in tooltips \n  * fixed: Calendar invites were incorrectly marked processed\n    after calendar sync completed \n  * fixed: ICS event comments were not displayed in Thunderbird\n    event details \n  * fixed: Dismissed Gmail calendar reminder did nothing and item\n    stayed visible \n  * fixed: iCal imports misread unknown timezones as GMT,\n    creating events at wrong times \n  * fixed: Could not export local calendar as HTML \n  * fixed: Cancelled filter edit dialog closed the message filter\n    dialog \n  * fixed: Visual and UX improvements \n  * CVE-2026-14899 \n    Off-by-one out of bounds read in MIME header parser for\n    forwarding\n  * CVE-2026-16349 \n    Same-origin policy bypass in the DOM: Navigation component\n  * CVE-2026-16350 \n    Incorrect boundary conditions in the Audio/Video: cubeb\n    component\n  * CVE-2026-16362 \n    Use-after-free in the WebRTC: Audio/Video component\n  * CVE-2026-16351 \n    Sandbox escape due to use-after-free in the DOM: Navigation\n    component\n  * CVE-2026-16352 \n    Sandbox escape due to use-after-free in the Disability Access\n    APIs component\n  * CVE-2026-16363 \n    JIT miscompilation in the JavaScript: WebAssembly component\n  * CVE-2026-16364 \n    Incorrect boundary conditions in the Audio/Video: Playback\n    component\n  * CVE-2026-16365 \n    Privilege escalation in the DOM: Workers component\n  * CVE-2026-16366 \n    Privilege escalation in the DOM: Navigation component\n  * CVE-2026-16353 \n    Invalid pointer in the DOM: Bindings (WebIDL) component\n  * CVE-2026-16354 \n    Information disclosure in the Graphics: ImageLib component\n  * CVE-2026-16367 \n    Sandbox escape due to invalid pointer in the Disability\n    Access APIs component\n  * CVE-2026-16368 \n    Incorrect boundary conditions in the JavaScript: WebAssembly\n    component\n  * CVE-2026-16369 \n    Integer overflow in the JavaScript: WebAssembly component\n  * CVE-2026-16355 \n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-16356 \n    Sandbox escape due to use-after-free in the Disability Access\n    APIs component\n  * CVE-2026-16357 \n    Incorrect boundary conditions in the Graphics component\n  * CVE-2026-16370 \n    Mitigation bypass in the DOM: Networking component\n  * CVE-2026-16371 \n    Privilege escalation in the DOM: Navigation component\n  * CVE-2026-16372 \n    Privilege escalation in the DOM: Content Processes component\n  * CVE-2026-16374 \n    Information disclosure in the Framework component in DevTools\n  * CVE-2026-16375 \n    Site isolation issue in the Networking: HTTP component\n  * CVE-2026-16376 \n    Denial-of-service in the Graphics: WebGPU component\n  * CVE-2026-16377 \n    Mitigation bypass in the PDF Viewer component\n  * CVE-2026-16378 \n    Other issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop\n    component\n  * CVE-2026-16379 \n    Privilege escalation in the DOM: Content Processes component\n  * CVE-2026-16358 \n    Site isolation issue in the Graphics: WebRender component\n  * CVE-2026-16380 \n    Mitigation bypass in the Networking component\n  * CVE-2026-16381 \n    Same-origin policy bypass in the Networking: DNS component\n  * CVE-2026-16382 \n    Mitigation bypass in the DOM: Service Workers component\n  * CVE-2026-16383 \n    Mitigation bypass in the DOM: Networking component\n  * CVE-2026-16384 \n    Information disclosure due to uninitialized memory in the\n    Graphics: WebGPU component\n  * CVE-2026-16385 \n    Information disclosure due to uninitialized memory in the\n    Graphics: WebGPU component\n  * CVE-2026-16386 \n    Information disclosure due to uninitialized memory in the\n    Graphics: WebGPU component\n  * CVE-2026-16387 \n    Site isolation issue in the Networking component\n  * CVE-2026-16388 \n    Sandbox escape in the DOM: Networking component\n  * CVE-2026-16389 \n    Incorrect boundary conditions, integer overflow in the\n    Libraries component in NSS\n  * CVE-2026-16390 \n    Mitigation bypass in the Enterprise Policies component\n  * CVE-2026-16391 \n    Information disclosure in the Storage: IndexedDB component\n  * CVE-2026-16392 \n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-16393 \n    Incorrect boundary conditions in the Graphics: WebGPU\n    component\n  * CVE-2026-16359 \n    Incorrect boundary conditions in the Audio/Video: GMP\n    component\n  * CVE-2026-16394 \n    Mitigation bypass in the DOM: Security component\n  * CVE-2026-16395 \n    Integer overflow in the Audio/Video component\n  * CVE-2026-16396 \n    Privilege escalation in WebExtensions\n  * CVE-2026-16398 \n    Site isolation issue in the Graphics component\n  * CVE-2026-16399 \n    Site isolation issue in the DOM: Navigation component\n  * CVE-2026-16400 \n    Information disclosure in the DOM: Security component\n  * CVE-2026-16401 \n    Privilege escalation in the Data Loss Prevention component\n  * CVE-2026-16402 \n    Integer overflow in the Graphics: ImageLib component\n  * CVE-2026-16403 \n    Spoofing issue in the Address Bar component\n  * CVE-2026-16405 \n    Information disclosure in the Networking: WebSockets\n    component\n  * CVE-2026-16406 \n    Mitigation bypass in the Networking component\n  * CVE-2026-16407 \n    Mitigation bypass in the DOM: Service Workers component\n  * CVE-2026-16408 \n    Integer overflow in the Audio/Video: Playback component\n  * CVE-2026-16409 \n    Invalid pointer in the Security: PSM component\n  * CVE-2026-16410 \n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-16411 \n    Memory safety bugs fixed in Thunderbird 153\n  * CVE-2026-16412 \n    Memory safety bugs fixed in Thunderbird ESR 140.13 and\n    Thunderbird 153\n  * CVE-2026-16360 \n    Memory safety bugs fixed in Thunderbird ESR 140.13 and\n    Thunderbird 153\n","status":"published","published":"2026-09-18T14:51:02Z","modified":"2026-09-19T09:00:04.375866356Z","updated_at":"2026-11-02T15:54:05.392906Z"}]}}