ESB-2026.4311

=========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2026.4311 firefox security update 28 April 2026 =========================================================================== AUSCERT Security Bulletin Summary --------------------------------- Product: firefox Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2026-6746 CVE-2026-6747 CVE-2026-6748 CVE-2026-6749 CVE-2026-6750 CVE-2026-6751 CVE-2026-6752 CVE-2026-6753 CVE-2026-6754 CVE-2026-6757 CVE-2026-6759 CVE-2026-6761 CVE-2026-6762 CVE-2026-6763 CVE-2026-6764 CVE-2026-6765 CVE-2026-6766 CVE-2026-6767 CVE-2026-6769 CVE-2026-6770 CVE-2026-6771 CVE-2026-6772 CVE-2026-6776 CVE-2026-6785 CVE-2026-6786 Original Bulletin: https://access.redhat.com/errata/RHSA-2026:10766 Comment: CVSS (Max): 7.5 CVE-2026-6786 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: Red Hat Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H EPSS (Max): 0.1% (21st) CVE-2026-6785 2026-04-27 - --------------------------BEGIN INCLUDED TEXT-------------------- RHSA-2026:10766 - Security Advisory Issued: 2026-04-27 Updated: 2026-04-27 Synopsis Firefox security update Type/Severity Security Advisory: Important Topic An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): o firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772) o firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754) o firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component (CVE-2026-6762) o firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752) o firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770) o firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757) o firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767) o firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786) o firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753) o firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759) o firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747) o firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749) o firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766) o firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761) o firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763) o firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750) o firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748) o firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785) o firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771) o firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764) o firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765) o firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769) o firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751) o firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776) o firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-6746) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products o Red Hat Enterprise Linux for x86_64 8 x86_64 o Red Hat Enterprise Linux for IBM z Systems 8 s390x o Red Hat Enterprise Linux for Power, little endian 8 ppc64le o Red Hat Enterprise Linux for ARM 64 8 aarch64 o Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 o Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 o Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le o Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes o BZ - 2460074 - CVE-2026-6772 firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS o BZ - 2460075 - CVE-2026-6754 firefox: thunderbird: Use-after-free in the JavaScript Engine component o BZ - 2460076 - CVE-2026-6762 firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component o BZ - 2460078 - CVE-2026-6752 firefox: thunderbird: Incorrect boundary conditions in the WebRTC component o BZ - 2460079 - CVE-2026-6770 firefox: thunderbird: Other issue in the Storage: IndexedDB component o BZ - 2460085 - CVE-2026-6757 firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component o BZ - 2460086 - CVE-2026-6767 firefox: thunderbird: Other issue in the Libraries component in NSS o BZ - 2460088 - CVE-2026-6786 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 o BZ - 2460092 - CVE-2026-6753 firefox: thunderbird: Incorrect boundary conditions in the WebRTC component o BZ - 2460094 - CVE-2026-6759 firefox: thunderbird: Use-after-free in the Widget: Cocoa component o BZ - 2460095 - CVE-2026-6747 firefox: thunderbird: Use-after-free in the WebRTC component o BZ - 2460096 - CVE-2026-6749 firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component o BZ - 2460097 - CVE-2026-6766 firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS o BZ - 2460099 - CVE-2026-6761 firefox: thunderbird: Privilege escalation in the Networking component o BZ - 2460101 - CVE-2026-6763 firefox: thunderbird: Mitigation bypass in the File Handling component o BZ - 2460102 - CVE-2026-6750 firefox: thunderbird: Privilege escalation in the Graphics: WebRender component o BZ - 2460103 - CVE-2026-6748 firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component o BZ - 2460104 - CVE-2026-6785 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 o BZ - 2460105 - CVE-2026-6771 firefox: thunderbird: Mitigation bypass in the DOM: Security component o BZ - 2460106 - CVE-2026-6764 firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component o BZ - 2460107 - CVE-2026-6765 firefox: thunderbird: Information disclosure in the Form Autofill component o BZ - 2460108 - CVE-2026-6769 firefox: thunderbird: Privilege escalation in the Debugger component o BZ - 2460109 - CVE-2026-6751 firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component o BZ - 2460110 - CVE-2026-6776 firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component o BZ - 2460112 - CVE-2026-6746 firefox: thunderbird: Use-after-free in the DOM: Core & HTML component CVEs o CVE-2026-6746 o CVE-2026-6747 o CVE-2026-6748 o CVE-2026-6749 o CVE-2026-6750 o CVE-2026-6751 o CVE-2026-6752 o CVE-2026-6753 o CVE-2026-6754 o CVE-2026-6757 o CVE-2026-6759 o CVE-2026-6761 o CVE-2026-6762 o CVE-2026-6763 o CVE-2026-6764 o CVE-2026-6765 o CVE-2026-6766 o CVE-2026-6767 o CVE-2026-6769 o CVE-2026-6770 o CVE-2026-6771 o CVE-2026-6772 o CVE-2026-6776 o CVE-2026-6785 o CVE-2026-6786 References o https://access.redhat.com/security/updates/classification/#important - --------------------------END INCLUDED TEXT---------------------- You have received this e-mail bulletin as a result of your organisation's registration with AUSCERT. The mailing list you are subscribed to is maintained within your organisation, so if you do not wish to continue receiving these bulletins you should contact your local IT manager. If you do not know who that is, please send an email to auscert@auscert.org.au and we will forward your request to the appropriate person. NOTE: Third Party Rights This security bulletin is provided as a service to AUSCERT's members. As AUSCERT did not write the document quoted above, AUSCERT has had no control over its content. The decision to follow or act on information or advice contained in this security bulletin is the responsibility of each user or organisation, and should be considered in accordance with your organisation's site policies and procedures. AUSCERT takes no responsibility for consequences which may arise from following or acting on information or advice contained in this security bulletin. NOTE: This is only the original release of the security bulletin. It may not be updated when updates to the original are made. If downloading at a later date, it is recommended that the bulletin is retrieved directly from the author's website to ensure that the information is still current. Contact information for the authors of the original document is included in the Security Bulletin above. If you have any questions or need further information, please contact them directly. Previous advisories and external security bulletins can be retrieved from: https://portal.auscert.org.au/bulletins/ =========================================================================== AUSCERT The University of Queensland, Brisbane QLD 4072 Australia e: auscert@auscert.org.au t: +61 (0)7 3365 4417 Allies in Cyber Security ===========================================================================