VDB

RHSA-2026:49921

RHSA-2026:49921 PUBLISHED CVSS 3.4000000953674316 LOW

Record from redhat · Published August 4, 2026

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

Risk scores

CVSS 3.1
3.4000000953674316
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

Affected products

VendorProductVersions
Red Hatthunderbird-debugsource-0:140.13.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)0:140.13.0-1.el9_8
Red Hatthunderbird-0:140.13.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)0:140.13.0-1.el9_8
Red Hatthunderbird-debuginfo-0:140.13.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)0:140.13.0-1.el9_8
Red Hatthunderbird-debugsource-0:140.13.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)0:140.13.0-1.el9_8
Red Hatthunderbird-debuginfo-0:140.13.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)0:140.13.0-1.el9_8
Red Hatthunderbird-0:140.13.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)0:140.13.0-1.el9_8
Red Hatthunderbird-debugsource-0:140.13.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)0:140.13.0-1.el9_8
Red Hatthunderbird-debugsource-0:140.13.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)0:140.13.0-1.el9_8
Red Hatthunderbird-debuginfo-0:140.13.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)0:140.13.0-1.el9_8
Red Hatthunderbird-0:140.13.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)0:140.13.0-1.el9_8
Red Hatthunderbird-debuginfo-0:140.13.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)0:140.13.0-1.el9_8
Red Hatthunderbird-0:140.13.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)0:140.13.0-1.el9_8
Red Hatthunderbird-0:140.13.0-1.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)0:140.13.0-1.el9_8

Timeline

  • Aug 4, 2026 CVE Published
  • Aug 12, 2026 CVE Updated
  • Aug 12, 2026 Distribution Patch (2 in total, the first dated here)
  • Aug 12, 2026 Security Advisory (34 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHSA-2026:49921
vulnetix vdb fixes RHSA-2026:49921

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHSA-2026%3A49921/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

…and 180 more

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›