VDB
RHSA-2026:49921
RHSA-2026:49921
PUBLISHED
CVSS 3.4000000953674316 LOW
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
Risk Scores
CVSS 3.1
3.4000000953674316
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | thunderbird-debugsource-0:140.13.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:140.13.0-1.el9_8 |
| Red Hat | thunderbird-0:140.13.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:140.13.0-1.el9_8 |
| Red Hat | thunderbird-debuginfo-0:140.13.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:140.13.0-1.el9_8 |
| Red Hat | thunderbird-debugsource-0:140.13.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:140.13.0-1.el9_8 |
| Red Hat | thunderbird-debuginfo-0:140.13.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:140.13.0-1.el9_8 |
| Red Hat | thunderbird-0:140.13.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:140.13.0-1.el9_8 |
| Red Hat | thunderbird-debugsource-0:140.13.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:140.13.0-1.el9_8 |
| Red Hat | thunderbird-debugsource-0:140.13.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:140.13.0-1.el9_8 |
| Red Hat | thunderbird-debuginfo-0:140.13.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:140.13.0-1.el9_8 |
| Red Hat | thunderbird-0:140.13.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:140.13.0-1.el9_8 |
| Red Hat | thunderbird-debuginfo-0:140.13.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:140.13.0-1.el9_8 |
| Red Hat | thunderbird-0:140.13.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:140.13.0-1.el9_8 |
| Red Hat | thunderbird-0:140.13.0-1.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9) | 0:140.13.0-1.el9_8 |
Timeline
- Aug 4, 2026 CVE Published
- Aug 12, 2026 CVE Updated
- Aug 12, 2026 Distribution Patch
- Aug 12, 2026 Distribution Patch
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:49921 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2503454 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503456 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503463 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503472 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503473 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503485 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503489 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503491 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503497 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503498 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503500 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503501 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503505 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503512 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503513 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503517 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503521 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503527 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2506217 issue
…and 180 more