RHSA-2026:19348
Vulnerability from csaf_redhat - Published: 2026-05-19 00:00 - Updated: 2026-09-16 18:18Summary
security update for thunderbird
Severity
Important
Notes
Title of the patch: security update for thunderbird
Description of the patch: This security update provides a functional equivalent of RHSA-2026:19348.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:19348.
Patchnames: RHSA-2026:19348
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
critical
8.8 (High)
Affected products
Recommended
1 product, the same list as for
CVE-2026-6746
Threats
Impact
important
References
94 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for thunderbird",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:19348.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:19348.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:19348",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_19348.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:19348",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-June/006041.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:19348",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-June/006041.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6746 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6746/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6747 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6747/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6748 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6748/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6749 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6749/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6750 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6750/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6751 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6751/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6752 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6753 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6753/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6754 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6754/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6757 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6759 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6761 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6761/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6762 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6763 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6764 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6764/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6765 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6766 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6767 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6769 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6770 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6770/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6771 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6772 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6776 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6776/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6785 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6785/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6786 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7320 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7320/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7321 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7321/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7322 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7322/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7323 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7323/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8091 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8091/"
}
],
"title": "security update for thunderbird",
"tracking": {
"current_release_date": "2026-09-16T18:18:17Z",
"generator": {
"date": "2026-05-19T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:19348",
"initial_release_date": "2026-05-19T00:00:00Z",
"revision_history": [
{
"date": "2026-05-19T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T17:45:07Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:02:10Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:18:17Z",
"number": "4",
"summary": "unknown changes"
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-140.10.1-1.el9_8.x86_64",
"product": {
"name": "thunderbird-140.10.1-1.el9_8.x86_64",
"product_id": "thunderbird-140.10.1-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/thunderbird@140.10.1-1.el9_8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 9",
"product": {
"name": "SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-140.10.1-1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
},
"product_reference": "thunderbird-140.10.1-1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6746"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6746",
"url": "https://www.suse.com/security/cve/CVE-2026-6746"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6746",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6746"
},
{
"cve": "CVE-2026-6747",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6747"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6747",
"url": "https://www.suse.com/security/cve/CVE-2026-6747"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6747",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6747"
},
{
"cve": "CVE-2026-6748",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6748"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6748",
"url": "https://www.suse.com/security/cve/CVE-2026-6748"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6748",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6748"
},
{
"cve": "CVE-2026-6749",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6749"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6749",
"url": "https://www.suse.com/security/cve/CVE-2026-6749"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6749",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6749"
},
{
"cve": "CVE-2026-6750",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6750"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6750",
"url": "https://www.suse.com/security/cve/CVE-2026-6750"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6750",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6750"
},
{
"cve": "CVE-2026-6751",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6751"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6751",
"url": "https://www.suse.com/security/cve/CVE-2026-6751"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6751",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6751"
},
{
"cve": "CVE-2026-6752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6752"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6752",
"url": "https://www.suse.com/security/cve/CVE-2026-6752"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6752",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6752"
},
{
"cve": "CVE-2026-6753",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6753"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6753",
"url": "https://www.suse.com/security/cve/CVE-2026-6753"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6753",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6753"
},
{
"cve": "CVE-2026-6754",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6754"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6754",
"url": "https://www.suse.com/security/cve/CVE-2026-6754"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6754",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6754"
},
{
"cve": "CVE-2026-6757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6757"
}
],
"notes": [
{
"category": "general",
"text": "Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6757",
"url": "https://www.suse.com/security/cve/CVE-2026-6757"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6757",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6757"
},
{
"cve": "CVE-2026-6759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6759"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6759",
"url": "https://www.suse.com/security/cve/CVE-2026-6759"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6759",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6759"
},
{
"cve": "CVE-2026-6761",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6761"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6761",
"url": "https://www.suse.com/security/cve/CVE-2026-6761"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6761",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6761"
},
{
"cve": "CVE-2026-6762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6762"
}
],
"notes": [
{
"category": "general",
"text": "Spoofing issue in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6762",
"url": "https://www.suse.com/security/cve/CVE-2026-6762"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6762",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6762"
},
{
"cve": "CVE-2026-6763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6763"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6763",
"url": "https://www.suse.com/security/cve/CVE-2026-6763"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6763",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6763"
},
{
"cve": "CVE-2026-6764",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6764"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6764",
"url": "https://www.suse.com/security/cve/CVE-2026-6764"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6764",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6764"
},
{
"cve": "CVE-2026-6765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6765"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6765",
"url": "https://www.suse.com/security/cve/CVE-2026-6765"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6765",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6765"
},
{
"cve": "CVE-2026-6766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6766"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6766",
"url": "https://www.suse.com/security/cve/CVE-2026-6766"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6766",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6766"
},
{
"cve": "CVE-2026-6767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6767"
}
],
"notes": [
{
"category": "general",
"text": "Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6767",
"url": "https://www.suse.com/security/cve/CVE-2026-6767"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6767",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6767"
},
{
"cve": "CVE-2026-6769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6769"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6769",
"url": "https://www.suse.com/security/cve/CVE-2026-6769"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6769",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6769"
},
{
"cve": "CVE-2026-6770",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6770"
}
],
"notes": [
{
"category": "general",
"text": "Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6770",
"url": "https://www.suse.com/security/cve/CVE-2026-6770"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6770",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6770"
},
{
"cve": "CVE-2026-6771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6771"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6771",
"url": "https://www.suse.com/security/cve/CVE-2026-6771"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6771",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6771"
},
{
"cve": "CVE-2026-6772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6772"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6772",
"url": "https://www.suse.com/security/cve/CVE-2026-6772"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6772",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6772"
},
{
"cve": "CVE-2026-6776",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6776"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6776",
"url": "https://www.suse.com/security/cve/CVE-2026-6776"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6776",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6776"
},
{
"cve": "CVE-2026-6785",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6785"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6785",
"url": "https://www.suse.com/security/cve/CVE-2026-6785"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6785",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6785"
},
{
"cve": "CVE-2026-6786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6786"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6786",
"url": "https://www.suse.com/security/cve/CVE-2026-6786"
},
{
"category": "external",
"summary": "SUSE Bug 1262230 for CVE-2026-6786",
"url": "https://bugzilla.suse.com/1262230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-6786"
},
{
"cve": "CVE-2026-7320",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7320"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7320",
"url": "https://www.suse.com/security/cve/CVE-2026-7320"
},
{
"category": "external",
"summary": "SUSE Bug 1263110 for CVE-2026-7320",
"url": "https://bugzilla.suse.com/1263110"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7320"
},
{
"cve": "CVE-2026-7321",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7321"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7321",
"url": "https://www.suse.com/security/cve/CVE-2026-7321"
},
{
"category": "external",
"summary": "SUSE Bug 1263110 for CVE-2026-7321",
"url": "https://bugzilla.suse.com/1263110"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7321"
},
{
"cve": "CVE-2026-7322",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7322"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7322",
"url": "https://www.suse.com/security/cve/CVE-2026-7322"
},
{
"category": "external",
"summary": "SUSE Bug 1263110 for CVE-2026-7322",
"url": "https://bugzilla.suse.com/1263110"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7322"
},
{
"cve": "CVE-2026-7323",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7323"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7323",
"url": "https://www.suse.com/security/cve/CVE-2026-7323"
},
{
"category": "external",
"summary": "SUSE Bug 1263110 for CVE-2026-7323",
"url": "https://bugzilla.suse.com/1263110"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-7323"
},
{
"cve": "CVE-2026-8091",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8091"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8091",
"url": "https://www.suse.com/security/cve/CVE-2026-8091"
},
{
"category": "external",
"summary": "SUSE Bug 1264378 for CVE-2026-8091",
"url": "https://bugzilla.suse.com/1264378"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:thunderbird-140.10.1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-8091"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…