Red Hat Security Advisory: firefox security update

CVE-2026-74934 — firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74935 — firefox: thunderbird: Privilege escalation in the DOM: Networking component CVE-2026-74936 — firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component CVE-2026-74939 — firefox: thunderbird: Privilege escalation in the DOM: Navigation component CVE-2026-74940 — firefox: thunderbird: Use-after-free in the Graphics: Text component CVE-2026-74941 — firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component CVE-2026-74942 — firefox: Privilege escalation in the Remote Settings Client component CVE-2026-74943 — firefox: thunderbird: Use-after-free in the Graphics: ImageLib component CVE-2026-74944 — firefox: thunderbird: Use-after-free in the DOM: Core & HTML component CVE-2026-74945 — firefox: thunderbird: Information disclosure in the Graphics: Text component CVE-2026-74946 — firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-74948 — firefox: thunderbird: Information disclosure in the Graphics component CVE-2026-74949 — firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component CVE-2026-74953 — firefox: thunderbird: Privilege escalation in the Networking: Cookies component CVE-2026-74957 — firefox: thunderbird: Mitigation bypass in the Safe Browsing component CVE-2026-74959 — firefox: thunderbird: Mitigation bypass in the Storage: Cache API component CVE-2026-74960 — firefox: thunderbird: Site isolation issue in the WebExtensions component CVE-2026-74962 — firefox: Site isolation issue in the Networking: Cookies component CVE-2026-74963 — firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component CVE-2026-74964 — firefox: Integer overflow in the Graphics component CVE-2026-74965 — firefox: Privilege escalation in the Shell Integration component CVE-2026-74967 — firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component CVE-2026-74969 — firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component CVE-2026-74971 — firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component CVE-2026-74972 — firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component CVE-2026-74973 — firefox: Race condition, use-after-free in the Graphics component CVE-2026-74974 — firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component CVE-2026-74976 — firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component CVE-2026-74983 — firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74987 — firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 CVE-2026-74990 — firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154