{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "update to 153.2.0 ESR (MFSA 2026-80, MFSA 2026-88)\n- regenerate P11 rust-file-removal: the comm copy of the vendored wast crate\n changed in 153.2.0, so its one-line .cargo-checksum.json hunk no longer\n matched (the third_party copy and idna were unaffected)\n- CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component\n- CVE-2026-74935: Privilege escalation in the DOM: Networking component\n- CVE-2026-74936: Use-after-free in the JavaScript: WebAssembly component\n- CVE-2026-74937: Use-after-free in the JavaScript: GC component\n- CVE-2026-74938: Mitigation bypass in the JavaScript: GC component\n- CVE-2026-74939: Privilege escalation in the DOM: Navigation component\n- CVE-2026-74940: Use-after-free in the Graphics: Text component\n- CVE-2026-74941: Privilege escalation in the Graphics: CanvasWebGL component\n- CVE-2026-74942: Privilege escalation in the Remote Settings Client component\n- CVE-2026-74943: Use-after-free in the Graphics: ImageLib component\n- CVE-2026-74944: Use-after-free in the DOM: Core & HTML component\n- CVE-2026-74945: Information disclosure in the Graphics: Text component\n- CVE-2026-74946: Privilege escalation due to incorrect boundary conditions in\n the Graphics: CanvasWebGL component\n- CVE-2026-74947: Privilege escalation due to invalid pointer in the Graphics\n component\n- CVE-2026-74948: Information disclosure in the Graphics component\n- CVE-2026-74949: Privilege escalation due to use-after-free in the Graphics:\n Canvas2D component\n- CVE-2026-74952: Privilege escalation in the Application Update component\n- CVE-2026-74953: Privilege escalation in the Networking: Cookies component\n- CVE-2026-74954: Information disclosure due to side-channel in the Storage:\n Cache API component\n- CVE-2026-74955: Privilege escalation in the Request Handling component\n- CVE-2026-74956: Same-origin policy bypass in the DOM: Service Workers\n component\n- CVE-2026-74957: Mitigation bypass in the Safe Browsing component\n- CVE-2026-74958: Information disclosure in the WebRTC component\n- CVE-2026-74959: Mitigation bypass in the Storage: Cache API component\n- CVE-2026-74960: Site isolation issue in the WebExtensions component\n- CVE-2026-74961: Side-channel in the Web Audio component\n- CVE-2026-74962: Site isolation issue in the Networking: Cookies component\n- CVE-2026-74963: Same-origin policy bypass in the Networking: Cookies component\n- CVE-2026-74964: Integer overflow in the Graphics component\n- CVE-2026-74965: Privilege escalation in the Shell Integration component\n- CVE-2026-74966: Information disclosure in the Form Autofill component\n- CVE-2026-74967: Same-origin policy bypass in the Audio/Video: Playback\n component\n- CVE-2026-74968: Site isolation issue in the Graphics: WebRender component\n- CVE-2026-74969: Use-after-free in the Layout: Text and Fonts component\n- CVE-2026-74970: Site isolation issue in the Graphics component\n- CVE-2026-74971: Information disclosure in the DOM: UI Events & Focus Handling\n component\n- CVE-2026-74972: Information disclosure in the DOM: Push Subscriptions\n component\n- CVE-2026-74973: Race condition, use-after-free in the Graphics component\n- CVE-2026-74974: Same-origin policy bypass in the Graphics: ImageLib component\n- CVE-2026-74976: JIT miscompilation in the JavaScript Engine: JIT component\n- CVE-2026-74977: Integer overflow in the Graphics component\n- CVE-2026-74978: Clickjacking issue in the Widget component\n- CVE-2026-74979: Mitigation bypass in the Add-ons Manager component\n- CVE-2026-74981: Site isolation issue in the Audio/Video: Web Codecs component\n- CVE-2026-74982: Denial-of-service in the Widget component\n- CVE-2026-74983: Mitigation bypass in the Data Loss Prevention component\n- CVE-2026-74984: Race condition in the JavaScript Engine component\n- CVE-2026-74985: Privilege escalation in the Enterprise Policies component\n- CVE-2026-74986: Site isolation issue in the CSS Parsing and Computation\n component\n- CVE-2026-74987: Internally found bugs fixed in Thunderbird ESR 140.14,\n Thunderbird ESR 153.1 and Thunderbird 154\n- CVE-2026-74988: Internally found bugs fixed in Thunderbird ESR 153.1 and\n Thunderbird 154\n- CVE-2026-74990: Internally found bugs fixed in Thunderbird ESR 140.14,\n Thunderbird ESR 153.1 and Thunderbird 154\n- CVE-2026-75874: Sandbox escape in the Remote Settings Client component", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2026/clsa-2026_1788696027.json" } ], "tracking": { "current_release_date": "2026-09-07T13:15:54Z", "generator": { "date": "2026-09-07T13:15:54Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1788696027", "initial_release_date": "2026-09-06T12:06:13Z", "revision_history": [ { "date": "2026-09-06T12:06:13Z", "number": "1", "summary": "Initial version" }, { "date": "2026-09-07T10:53:08Z", "number": "2", "summary": "Update document" }, { "date": "2026-09-07T13:15:54Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "thunderbird: Fix of 53 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.2", "product": { "name": "AlmaLinux 9.2", "product_id": "AlmaLinux-9.2", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product": { "name": "thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product_id": "thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@153.2.0-1.el9_2.alma.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64", "product": { "name": "thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64", "product_id": "thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@153.0.1-1.el9_2.alma.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product": { "name": "thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product_id": "thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@140.13.0-1.el9_2.alma.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product": { "name": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product_id": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@140.12.0-1.el9_2.alma.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els27?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els25?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els24?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els23?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els19?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els17?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els18?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els16?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els15?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els14?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els13?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els11?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els7?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els10?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els9?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "product": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" }, "product_reference": "thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" }, "product_reference": "thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64" }, "product_reference": "thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64" }, "product_reference": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64" }, "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-84137", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84137" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2051146", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2051146" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-74963", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74963" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2050482", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2050482" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84132", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84132" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2063020", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2063020" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74972", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74972" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2059053", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2059053" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74942", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "description", "text": "Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74942" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2056571", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2056571" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-75/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-75/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74965", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "description", "text": "Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74965" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2053455", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2053455" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74953", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "description", "text": "Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74953" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2022382", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2022382" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74959", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "notes": [ { "category": "description", "text": "Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74959" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2047853", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2047853" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74958", "cwe": { "id": "CWE-1021", "name": "Improper Restriction of Rendered UI Layers or Frames" }, "notes": [ { "category": "description", "text": "Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74958" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2045368", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2045368" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84639", "cwe": { "id": "CWE-457", "name": "Use of Uninitialized Variable" }, "notes": [ { "category": "description", "text": "Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84639" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2061087", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2061087" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-87/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-87/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T22:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T22:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74935", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "description", "text": "Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74935" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2051013", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2051013" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-75/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-75/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74968", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74968" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2055738", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2055738" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74974", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74974" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2061794", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2061794" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-75/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-75/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74956", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type ('Type Confusion')" }, "notes": [ { "category": "description", "text": "Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74956" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2032406", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2032406" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74939", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "description", "text": "Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74939" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2054416", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2054416" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-75/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-75/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74944", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74944" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057778", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057778" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74969", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74969" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2056065", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2056065" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-75/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-75/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84140", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84140" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2063780", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2063780" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84118", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84118" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057457", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057457" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84642", "cwe": { "id": "CWE-1333", "name": "Inefficient Regular Expression Complexity" }, "notes": [ { "category": "description", "text": "The values of the mail.allowed_attachment_hostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow certain unintended hostnames to also match and serve remote attachments. This vulnerability was fixed in Thunderbird 155 and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84642" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060462", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060462" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T22:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T22:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74971", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74971" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057204", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057204" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74985", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "description", "text": "Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74985" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2059825", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2059825" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84121", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84121" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2059018", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2059018" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-83/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-83/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-84/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-84/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-87/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-87/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74973", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74973" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060357", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060357" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-75/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-75/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84136", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84136" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2048699", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2048699" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-74967", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74967" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2055697", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2055697" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74937", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74937" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2053337", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2053337" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74943", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74943" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057308", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057308" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-75/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-75/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74947", "cwe": { "id": "CWE-763", "name": "Release of Invalid Pointer or Reference" }, "notes": [ { "category": "description", "text": "Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74947" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060010", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060010" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84143", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84143" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2048793%2C2054645%2C2057114%2C2059109%2C2061287", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2048793%2C2054645%2C2057114%2C2059109%2C2061287" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2054631%2C2054657%2C2055007%2C2055681%2C2057107%2C2058087%2C2058088%2C2058090%2C2058095%2C2058101%2C2059183%2C2059185%2C2061301%2C2061325", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2054631%2C2054657%2C2055007%2C2055681%2C2057107%2C2058087%2C2058088%2C2058090%2C2058095%2C2058101%2C2059183%2C2059185%2C2061301%2C2061325" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057108", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057108" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-84/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-84/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-87/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-87/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84125", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84125" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2063871", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2063871" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74946", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74946" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2059997", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2059997" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-75/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-75/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74987", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74987" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1500946%2C1788109%2C2045379%2C2045380%2C2049339%2C2049393%2C2053580%2C2054662%2C2054665%2C2054673%2C2054785%2C2058645", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1500946%2C1788109%2C2045379%2C2045380%2C2049339%2C2049393%2C2053580%2C2054662%2C2054665%2C2054673%2C2054785%2C2058645" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2048797%2C2050536%2C2053272%2C2053579%2C2057115%2C2057116%2C2057130%2C2057991%2C2057995%2C2058002%2C2058008%2C2058032%2C2058102%2C2058667", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2048797%2C2050536%2C2053272%2C2053579%2C2057115%2C2057116%2C2057130%2C2057991%2C2057995%2C2058002%2C2058008%2C2058032%2C2058102%2C2058667" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2059424", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2059424" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74961", "cwe": { "id": "CWE-203", "name": "Observable Discrepancy" }, "notes": [ { "category": "description", "text": "Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74961" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2050380", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2050380" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74982", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74982" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2051788", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2051788" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84145", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84145" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2054640%2C2054650%2C2054652%2C2055693%2C2055705%2C2058051%2C2058652%2C2058660%2C2059027%2C2061220%2C2061242%2C2061285%2C2061300%2C2061316%2C2061397", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2054640%2C2054650%2C2054652%2C2055693%2C2055705%2C2058051%2C2058652%2C2058660%2C2059027%2C2061220%2C2061242%2C2061285%2C2061300%2C2061316%2C2061397" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2058001%2C2059139%2C2062400%2C2062419", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2058001%2C2059139%2C2062400%2C2062419" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2055678", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2055678" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-83/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-83/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-84/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-84/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-87/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-87/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74978", "cwe": { "id": "CWE-1021", "name": "Improper Restriction of Rendered UI Layers or Frames" }, "notes": [ { "category": "description", "text": "Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74978" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2036097", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2036097" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84129", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84129" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2055028", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2055028" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74957", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "notes": [ { "category": "description", "text": "Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74957" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2041906", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2041906" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84123", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84123" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060047", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060047" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74966", "cwe": { "id": "CWE-359", "name": "Exposure of Private Personal Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74966" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2054776", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2054776" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74940", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74940" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2054842", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2054842" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-75/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-75/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74934", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74934" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2050584", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2050584" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-75/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-75/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84133", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84133" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2032388", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2032388" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74954", "cwe": { "id": "CWE-203", "name": "Observable Discrepancy" }, "notes": [ { "category": "description", "text": "Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74954" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2025732", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2025732" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74979", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74979" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2045676", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2045676" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74945", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Information disclosure in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74945" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057808", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057808" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-75/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-75/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74938", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "notes": [ { "category": "description", "text": "Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74938" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2053688", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2053688" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84141", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84141" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2063994", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2063994" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74955", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "description", "text": "Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74955" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2029265", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2029265" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74988", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "Internally found bugs present in Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74988" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2018164%2C2045404%2C2045507%2C2045711%2C2052403%2C2053174%2C2054643%2C2054667%2C2054671%2C2054674%2C2054687%2C2054717%2C2054761%2C2054787%2C2055676%2C2056779%2C2056781%2C2058629%2C2059019%2C2059138", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2018164%2C2045404%2C2045507%2C2045711%2C2052403%2C2053174%2C2054643%2C2054667%2C2054671%2C2054674%2C2054687%2C2054717%2C2054761%2C2054787%2C2055676%2C2056779%2C2056781%2C2058629%2C2059019%2C2059138" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2045796%2C2046734%2C2051424%2C2054721%2C2057994%2C2058094%2C2058611%2C2058615%2C2058616%2C2061315", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2045796%2C2046734%2C2051424%2C2054721%2C2057994%2C2058094%2C2058611%2C2058615%2C2058616%2C2061315" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2053153%2C2053262%2C2054763%2C2059198%2C2059224", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2053153%2C2053262%2C2054763%2C2059198%2C2059224" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74948", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74948" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060106", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060106" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-75/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-75/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74984", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74984" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2053670", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2053670" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84139", "cwe": { "id": "CWE-1021", "name": "Improper Restriction of Rendered UI Layers or Frames" }, "notes": [ { "category": "description", "text": "Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84139" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060153", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060153" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-74936", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74936" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2052688", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2052688" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84120", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84120" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2058911", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2058911" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-83/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-83/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-84/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-84/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-87/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-87/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84640", "cwe": { "id": "CWE-126", "name": "Buffer Over-read" }, "notes": [ { "category": "description", "text": "A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84640" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2063964", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2063964" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-87/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-87/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T22:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T22:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84119", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84119" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057817", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057817" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-83/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-83/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-84/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-84/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-87/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-87/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84130", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84130" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057834", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057834" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74976", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type ('Type Confusion')" }, "notes": [ { "category": "description", "text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74976" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1952164", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1952164" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-75874", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "notes": [ { "category": "description", "text": "Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 140.15, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-75874" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2039972", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2039972" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-83/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-83/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-84/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-84/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-87/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-87/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74949", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74949" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060245", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060245" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74960", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74960" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2049148", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2049148" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74952", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "description", "text": "Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74952" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2021757", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2021757" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84637", "cwe": { "id": "CWE-434", "name": "Unrestricted Upload of File with Dangerous Type" }, "notes": [ { "category": "description", "text": "Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This vulnerability was fixed in Thunderbird 154 and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84637" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2043878", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2043878" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T22:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T22:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84131", "cwe": { "id": "CWE-763", "name": "Release of Invalid Pointer or Reference" }, "notes": [ { "category": "description", "text": "Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84131" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060008", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060008" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-83/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-83/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-84/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-84/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-87/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-87/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74977", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74977" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2028440", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2028440" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74962", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74962" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2050425", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2050425" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74986", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74986" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060048", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2060048" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74941", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "description", "text": "Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74941" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2055056", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2055056" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74990", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74990" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2045762%2C2052401%2C2058208", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2045762%2C2052401%2C2058208" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2045774%2C2048490%2C2050864%2C2053159%2C2053260%2C2053261%2C2053582%2C2053599%2C2053607%2C2053608%2C2053853%2C2054626%2C2054627%2C2054635%2C2054677%2C2054740%2C2054832%2C2056792%2C2057098%2C2057100%2C2057101%2C2057103%2C2057117%2C2057118%2C2058048%2C2058049%2C2058622%2C2058623%2C2058665%2C2058666%2C2059121%2C2059164%2C2059188", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2045774%2C2048490%2C2050864%2C2053159%2C2053260%2C2053261%2C2053582%2C2053599%2C2053607%2C2053608%2C2053853%2C2054626%2C2054627%2C2054635%2C2054677%2C2054740%2C2054832%2C2056792%2C2057098%2C2057100%2C2057101%2C2057103%2C2057117%2C2057118%2C2058048%2C2058049%2C2058622%2C2058623%2C2058665%2C2058666%2C2059121%2C2059164%2C2059188" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-75/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-75/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74970", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74970" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2056558", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2056558" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74964", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74964" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2053327", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2053327" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84641", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84641" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057805", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2057805" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-87/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-87/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T22:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T22:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84144", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84144" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2054619%2C2054620%2C2054624%2C2054702%2C2054726%2C2054775%2C2055703%2C2058006%2C2058013%2C2058098%2C2058627%2C2058661%2C2059127%2C2059128%2C2059180%2C2059199%2C2059205%2C2061320%2C2061430%2C2061495%2C2061505%2C2061532%2C2061799", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2054619%2C2054620%2C2054624%2C2054702%2C2054726%2C2054775%2C2055703%2C2058006%2C2058013%2C2058098%2C2058627%2C2058661%2C2059127%2C2059128%2C2059180%2C2059199%2C2059205%2C2061320%2C2061430%2C2061495%2C2061505%2C2061532%2C2061799" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2054625%2C2059002%2C2061775", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2054625%2C2059002%2C2061775" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2054691%2C2058085%2C2059144%2C2059191%2C2059192%2C2061521%2C2062395%2C2062404", "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2054691%2C2058085%2C2059144%2C2059191%2C2059192%2C2061521%2C2062395%2C2062404" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-84134", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84134" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2044882", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2044882" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-82/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-82/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-85/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-85/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-86/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-86/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-88/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-88/" } ], "release_date": "2026-09-01T13:20:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-09-01T13:20:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74981", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74981" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2050480", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2050480" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-74983", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "notes": [ { "category": "description", "text": "Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74983" }, { "category": "external", "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2051897", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2051897" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-74/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-74/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-76/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-77/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-77/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-78/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-78/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-79/" }, { "category": "external", "summary": "https://www.mozilla.org/security/advisories/mfsa2026-80/", "url": "https://www.mozilla.org/security/advisories/mfsa2026-80/" } ], "release_date": "2026-08-18T13:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-06T12:00:29.684817Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:153.2.0-1.el9_2.alma.1.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1788696027" }, { "category": "none_available", "date": "2026-08-18T13:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64", "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64", "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64", "AlmaLinux-9.2:thunderbird-0:153.0.1-1.el9_2.alma.1.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] } ] }