RHSA-2026:69461HighCVSS 7.5

Red Hat Security Advisory: firefox security update

Published
September 21, 2026
Last Modified
September 22, 2026

🔗 CVE IDs covered (28)

CVE-2026-92023 →CVE-2026-92025 →CVE-2026-92026 →CVE-2026-92027 →CVE-2026-92018 →CVE-2026-92028 →CVE-2026-92030 →CVE-2026-92031 →CVE-2026-92032 →CVE-2026-92010 →CVE-2026-92012 →CVE-2026-92013 →CVE-2026-92015 →CVE-2026-92021 →CVE-2026-92024 →CVE-2026-92029 →CVE-2026-92005 →CVE-2026-92006 →CVE-2026-92008 →CVE-2026-92009 →CVE-2026-92014 →CVE-2026-92019 →CVE-2026-92020 →CVE-2026-92022 →CVE-2026-92007 →CVE-2026-92011 →CVE-2026-92016 →CVE-2026-92017 →

📋 Description

CVE-2026-92005 — firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component CVE-2026-92006 — firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-92007 — firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-92008 — firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-92009 — firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-92010 — firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-92011 — firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-92012 — firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-92013 — firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-92014 — firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component CVE-2026-92015 — firefox: thunderbird: Privilege escalation in the WebExtensions component CVE-2026-92016 — firefox: thunderbird: Use-after-free in the Disability Access APIs component CVE-2026-92017 — firefox: thunderbird: Privilege escalation in the DOM: Service Workers component CVE-2026-92018 — firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component CVE-2026-92019 — firefox: thunderbird: Mitigation bypass in the Remote Settings Client component CVE-2026-92020 — firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component CVE-2026-92021 — firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component CVE-2026-92022 — firefox: thunderbird: Use-after-free in the DOM: HTML Parser component CVE-2026-92023 — firefox: thunderbird: Use-after-free in the XML component CVE-2026-92024 — firefox: thunderbird: Use-after-free in the SVG component CVE-2026-92025 — firefox: thunderbird: Use-after-free in the DOM: Navigation component CVE-2026-92026 — firefox: thunderbird: Use-after-free in the Networking component CVE-2026-92027 — firefox: thunderbird: Use-after-free in the DOM: Streams component CVE-2026-92028 — firefox: thunderbird: Use-after-free in the DOM: Core & HTML component CVE-2026-92029 — firefox: thunderbird: Use-after-free in the SVG component CVE-2026-92030 — firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component CVE-2026-92031 — firefox: thunderbird: Information disclosure in the Graphics: ImageLib component CVE-2026-92032 — firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component

🎯 Affected products14

  • Red Hat Enterprise Linux AppStream (v. 10)
  • firefox-0:140.16.0-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • firefox-0:140.16.0-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • firefox-0:140.16.0-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • firefox-0:140.16.0-1.el10_2.src as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • firefox-0:140.16.0-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • firefox-debuginfo-0:140.16.0-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • firefox-debuginfo-0:140.16.0-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • firefox-debuginfo-0:140.16.0-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • firefox-debuginfo-0:140.16.0-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • firefox-debugsource-0:140.16.0-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • firefox-debugsource-0:140.16.0-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • firefox-debugsource-0:140.16.0-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • firefox-debugsource-0:140.16.0-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (31)