RHSA-2026:14223HighCVSS 8.8

Red Hat Security Advisory: thunderbird security update

Published
May 6, 2026
Last Modified
May 26, 2026

🔗 CVE IDs covered (5)

CVE-2026-33416 →CVE-2026-33636 →CVE-2026-5731 →CVE-2026-5732 →CVE-2026-5734 →

📋 Description

CVE-2026-5731 — thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 CVE-2026-5732 — firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component CVE-2026-5734 — thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 CVE-2026-33416 — libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVE-2026-33636 — libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion

🔗 References (8)