{
  "fix": "RHSA-2026:5932",
  "url": "https://patchblox.com/security/fix/linux/rhsa-2026-5932",
  "summary": "RHSA-2026:5932, released April 15, 2026, fixes 37 CVEs in firefox (version 0:140.9.0-1.el8_10). None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "firefox security update",
  "released": "2026-04-15T19:03:41Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2026-4696, high severity",
  "supported": true,
  "cveCount": 37,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00967,
  "maxCvss": 10,
  "vendorAdvisory": "https://access.redhat.com/errata/RHSA-2026:5932",
  "appliesTo": [
    {
      "product": "firefox",
      "productUrl": "https://patchblox.com/security/product/linux/firefox",
      "release": "RHEL 8",
      "fixedVersion": "0:140.9.0-1.el8_10",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-4696",
      "url": "https://patchblox.com/security/cve/CVE-2026-4696",
      "title": "Use-after-free in the Layout: Text and Fonts component",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00967,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4700",
      "url": "https://patchblox.com/security/cve/CVE-2026-4700",
      "title": "Mitigation bypass in the Networking: HTTP component",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00918,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4690",
      "url": "https://patchblox.com/security/cve/CVE-2026-4690",
      "title": "Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.6,
      "epss": 0.00803,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4694",
      "url": "https://patchblox.com/security/cve/CVE-2026-4694",
      "title": "Incorrect boundary conditions, integer overflow in the Graphics component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00803,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4698",
      "url": "https://patchblox.com/security/cve/CVE-2026-4698",
      "title": "JIT miscompilation in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00785,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4686",
      "url": "https://patchblox.com/security/cve/CVE-2026-4686",
      "title": "Incorrect boundary conditions in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00729,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4685",
      "url": "https://patchblox.com/security/cve/CVE-2026-4685",
      "title": "Incorrect boundary conditions in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4693",
      "url": "https://patchblox.com/security/cve/CVE-2026-4693",
      "title": "Incorrect boundary conditions in the Audio/Video: Playback component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4695",
      "url": "https://patchblox.com/security/cve/CVE-2026-4695",
      "title": "Incorrect boundary conditions in the Audio/Video: Web Codecs component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4697",
      "url": "https://patchblox.com/security/cve/CVE-2026-4697",
      "title": "Incorrect boundary conditions in the Audio/Video: Web Codecs component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4699",
      "url": "https://patchblox.com/security/cve/CVE-2026-4699",
      "title": "Incorrect boundary conditions in the Layout: Text and Fonts component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4702",
      "url": "https://patchblox.com/security/cve/CVE-2026-4702",
      "title": "JIT miscompilation in the JavaScript Engine component",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.007,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4689",
      "url": "https://patchblox.com/security/cve/CVE-2026-4689",
      "title": "Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component",
      "priority": "High",
      "severity": "Important",
      "cvss": 10,
      "epss": 0.00691,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4705",
      "url": "https://patchblox.com/security/cve/CVE-2026-4705",
      "title": "Undefined behavior in the WebRTC: Signaling component",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00656,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4704",
      "url": "https://patchblox.com/security/cve/CVE-2026-4704",
      "title": "Denial-of-service in the WebRTC: Signaling component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00651,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4707",
      "url": "https://patchblox.com/security/cve/CVE-2026-4707",
      "title": "Incorrect boundary conditions in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.006,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4687",
      "url": "https://patchblox.com/security/cve/CVE-2026-4687",
      "title": "Sandbox escape due to incorrect boundary conditions in the Telemetry component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.6,
      "epss": 0.0056,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4688",
      "url": "https://patchblox.com/security/cve/CVE-2026-4688",
      "title": "Sandbox escape due to use-after-free in the Disability Access APIs component",
      "priority": "High",
      "severity": "Important",
      "cvss": 10,
      "epss": 0.00552,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4692",
      "url": "https://patchblox.com/security/cve/CVE-2026-4692",
      "title": "Sandbox escape in the Responsive Design Mode component",
      "priority": "High",
      "severity": "Important",
      "cvss": 10,
      "epss": 0.00506,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4691",
      "url": "https://patchblox.com/security/cve/CVE-2026-4691",
      "title": "Use-after-free in the CSS Parsing and Computation component",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00502,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4709",
      "url": "https://patchblox.com/security/cve/CVE-2026-4709",
      "title": "Incorrect boundary conditions in the Audio/Video: GMP component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00481,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4718",
      "url": "https://patchblox.com/security/cve/CVE-2026-4718",
      "title": "Undefined behavior in the WebRTC: Signaling component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00481,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4701",
      "url": "https://patchblox.com/security/cve/CVE-2026-4701",
      "title": "Use-after-free in the JavaScript Engine component",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00478,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4706",
      "url": "https://patchblox.com/security/cve/CVE-2026-4706",
      "title": "Incorrect boundary conditions in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.0047,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4708",
      "url": "https://patchblox.com/security/cve/CVE-2026-4708",
      "title": "Incorrect boundary conditions in the Graphics component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.0045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4713",
      "url": "https://patchblox.com/security/cve/CVE-2026-4713",
      "title": "Incorrect boundary conditions in the Graphics component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.0045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4714",
      "url": "https://patchblox.com/security/cve/CVE-2026-4714",
      "title": "Incorrect boundary conditions in the Audio/Video component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.0045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4719",
      "url": "https://patchblox.com/security/cve/CVE-2026-4719",
      "title": "Incorrect boundary conditions in the Graphics: Text component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.0045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4715",
      "url": "https://patchblox.com/security/cve/CVE-2026-4715",
      "title": "Uninitialized memory in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.1,
      "epss": 0.00447,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4720",
      "url": "https://patchblox.com/security/cve/CVE-2026-4720",
      "title": "Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.0044,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4721",
      "url": "https://patchblox.com/security/cve/CVE-2026-4721",
      "title": "Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.0044,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4717",
      "url": "https://patchblox.com/security/cve/CVE-2026-4717",
      "title": "Privilege escalation in the Netmonitor component",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00434,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4710",
      "url": "https://patchblox.com/security/cve/CVE-2026-4710",
      "title": "Incorrect boundary conditions in the Audio/Video component",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00425,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4716",
      "url": "https://patchblox.com/security/cve/CVE-2026-4716",
      "title": "Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.1,
      "epss": 0.00423,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4711",
      "url": "https://patchblox.com/security/cve/CVE-2026-4711",
      "title": "Use-after-free in the Widget: Cocoa component",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00413,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4712",
      "url": "https://patchblox.com/security/cve/CVE-2026-4712",
      "title": "Information disclosure in the Widget: Cocoa component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-4684",
      "url": "https://patchblox.com/security/cve/CVE-2026-4684",
      "title": "Race condition, use-after-free in the Graphics: WebRender component",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00366,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T12:40:37Z"
}