RHSA-2026:27734HighCVSS 7.5

Red Hat Security Advisory: firefox security update

Published
June 22, 2026
Last Modified
June 22, 2026

🔗 CVE IDs covered (29)

CVE-2026-12325 →CVE-2026-12296 →CVE-2026-12298 →CVE-2026-12306 →CVE-2026-12314 →CVE-2026-12315 →CVE-2026-12329 →CVE-2026-12295 →CVE-2026-12304 →CVE-2026-12328 →CVE-2026-12291 →CVE-2026-12297 →CVE-2026-12299 →CVE-2026-12302 →CVE-2026-12305 →CVE-2026-12289 →CVE-2026-12294 →CVE-2026-12310 →CVE-2026-12311 →CVE-2026-12312 →CVE-2026-12307 →CVE-2026-12309 →CVE-2026-12327 →CVE-2026-12330 →CVE-2026-12313 →CVE-2026-12324 →CVE-2026-12290 →CVE-2026-12292 →CVE-2026-12308 →

📋 Description

CVE-2026-12289 — firefox: thunderbird: Privilege escalation in the Graphics: WebRender component CVE-2026-12290 — firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 CVE-2026-12291 — firefox: thunderbird: Use-after-free in the Networking: HTTP component CVE-2026-12292 — firefox: thunderbird: Incorrect boundary conditions in the Web Audio component CVE-2026-12294 — firefox: thunderbird: Sandbox escape in the DOM: Workers component CVE-2026-12295 — firefox: thunderbird: Sandbox escape in the DOM: Navigation component CVE-2026-12296 — firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component CVE-2026-12297 — firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component CVE-2026-12298 — firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 CVE-2026-12299 — firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component CVE-2026-12302 — firefox: thunderbird: Mitigation bypass in the DOM: Security component CVE-2026-12304 — firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component CVE-2026-12305 — firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 CVE-2026-12306 — firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 CVE-2026-12307 — firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 CVE-2026-12308 — firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 CVE-2026-12309 — firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 CVE-2026-12310 — firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 CVE-2026-12311 — firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component CVE-2026-12312 — firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 CVE-2026-12313 — firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component CVE-2026-12314 — firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 CVE-2026-12315 — firefox: thunderbird: Mitigation bypass in the DOM: Security component CVE-2026-12324 — firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-12325 — firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component CVE-2026-12327 — firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 CVE-2026-12328 — firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 CVE-2026-12329 — firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 CVE-2026-12330 — firefox: thunderbird: Incorrect boundary conditions in the Internationalization component

🔗 References (32)