RHSA-2026:19370HighCVSS 8.8

Red Hat Security Advisory: firefox security update

Published
May 19, 2026
Last Modified
July 28, 2026

🔗 CVE IDs covered (5)

CVE-2026-7320 →CVE-2026-7321 →CVE-2026-7322 →CVE-2026-7323 →CVE-2026-8091 →

📋 Description

CVE-2026-7320 — firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component CVE-2026-7321 — firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component CVE-2026-7322 — firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 CVE-2026-7323 — firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 CVE-2026-8091 — firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component

🎯 Affected products18

  • Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-0:140.10.1-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-0:140.10.1-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-0:140.10.1-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-0:140.10.1-1.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-0:140.10.1-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-debuginfo-0:140.10.1-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-debuginfo-0:140.10.1-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-debuginfo-0:140.10.1-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-debuginfo-0:140.10.1-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-debugsource-0:140.10.1-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-debugsource-0:140.10.1-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-debugsource-0:140.10.1-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-debugsource-0:140.10.1-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-x11-0:140.10.1-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-x11-0:140.10.1-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-x11-0:140.10.1-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • firefox-x11-0:140.10.1-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (7)