RHSA-2026:22708HighCVSS 8.8

Red Hat Security Advisory: firefox security update

Published
June 3, 2026
Last Modified
July 28, 2026

🔗 CVE IDs covered (5)

CVE-2026-7322 →CVE-2026-7323 →CVE-2026-8091 →CVE-2026-7320 →CVE-2026-7321 →

📋 Description

CVE-2026-7320 — firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component CVE-2026-7321 — firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component CVE-2026-7322 — firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 CVE-2026-7323 — firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 CVE-2026-8091 — firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component

🎯 Affected products9

  • Red Hat Enterprise Linux Server (v. 7 ELS)
  • firefox-0:140.10.1-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • firefox-0:140.10.1-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • firefox-0:140.10.1-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • firefox-0:140.10.1-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • firefox-0:140.10.1-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • firefox-debuginfo-0:140.10.1-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • firefox-debuginfo-0:140.10.1-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • firefox-debuginfo-0:140.10.1-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (7)