# RHSA-2026:89758: firefox security update RHSA-2026:89758, released October 31, 2026, fixes 29 CVEs in firefox (version 153.5.0-1.el10_2). None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/rhsa-2026-89758 - Platform: Linux - Released: Oct 31, 2026 - Priority: Urgent (Closes CVE-2026-109708, rated Critical) - CVEs: 29, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://access.redhat.com/errata/RHSA-2026:89758 ## Applies to | Product | Release | Fixed in | |---|---|---| | [firefox](https://patchblox.com/security/data/product/linux/firefox.md) | RHEL 10 | 153.5.0-1.el10_2 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-109708](https://patchblox.com/security/data/cve/CVE-2026-109708.md) | Urgent | firefox-esr: Sandbox escape due to incorrect boundary conditions in the Networking component | 9.6 | 0.0033 | | | [CVE-2026-109705](https://patchblox.com/security/data/cve/CVE-2026-109705.md) | Urgent | thunderbird: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component | 9.6 | 0.0033 | | | [CVE-2026-109707](https://patchblox.com/security/data/cve/CVE-2026-109707.md) | Urgent | firefox-esr: Sandbox escape due to use-after-free in the Networking component | 9.6 | 0.0033 | | | [CVE-2026-45186](https://patchblox.com/security/data/cve/CVE-2026-45186.md) | High | In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. | 8.2 | 0.0048 | | | [CVE-2026-109704](https://patchblox.com/security/data/cve/CVE-2026-109704.md) | High | firefox: Privilege escalation in the Application Update component | 8.2 | 0.0041 | | | [CVE-2026-109730](https://patchblox.com/security/data/cve/CVE-2026-109730.md) | High | thunderbird: Integer overflow in the Graphics component | 8.8 | 0.0037 | | | [CVE-2026-109740](https://patchblox.com/security/data/cve/CVE-2026-109740.md) | High | firefox: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Secu... | 8.2 | 0.0035 | | | [CVE-2026-109709](https://patchblox.com/security/data/cve/CVE-2026-109709.md) | High | thunderbird: Information disclosure, privilege escalation in the Security: Process Sandboxing component | 8.8 | 0.0033 | | | [CVE-2026-77214](https://patchblox.com/security/data/cve/CVE-2026-77214.md) | High | libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer | 8.2 | 0.0032 | | | [CVE-2026-109715](https://patchblox.com/security/data/cve/CVE-2026-109715.md) | High | firefox-esr: Incorrect boundary conditions in the JavaScript Engine component | 8.8 | 0.0031 | | | [CVE-2026-109716](https://patchblox.com/security/data/cve/CVE-2026-109716.md) | High | firefox-esr: Incorrect boundary conditions in the JavaScript Engine component | 8.8 | 0.0031 | | | [CVE-2026-109722](https://patchblox.com/security/data/cve/CVE-2026-109722.md) | High | firefox-esr: JIT miscompilation in the JavaScript Engine: JIT component | 8.8 | 0.0031 | | | [CVE-2026-109721](https://patchblox.com/security/data/cve/CVE-2026-109721.md) | High | firefox-esr: Incorrect boundary conditions in the JavaScript Engine: JIT component | 8.8 | 0.0028 | | | [CVE-2026-109720](https://patchblox.com/security/data/cve/CVE-2026-109720.md) | High | firefox-esr: JIT miscompilation in the JavaScript: WebAssembly component | 8.8 | 0.0026 | | | [CVE-2026-109729](https://patchblox.com/security/data/cve/CVE-2026-109729.md) | High | thunderbird: Use-after-free in the JavaScript Engine: JIT component | 8.2 | 0.0024 | | | [CVE-2026-109732](https://patchblox.com/security/data/cve/CVE-2026-109732.md) | High | thunderbird: Use-after-free in the DOM: Streams component | 8.2 | 0.0024 | | | [CVE-2026-109718](https://patchblox.com/security/data/cve/CVE-2026-109718.md) | High | thunderbird: Use-after-free in the XML component | 8.8 | 0.0023 | | | [CVE-2026-109725](https://patchblox.com/security/data/cve/CVE-2026-109725.md) | High | thunderbird: Use-after-free in the DOM: Core & HTML component | 8.8 | 0.0023 | | | [CVE-2026-109728](https://patchblox.com/security/data/cve/CVE-2026-109728.md) | High | thunderbird: Use-after-free in the DOM: Animation component | 8.8 | 0.0023 | | | [CVE-2026-109706](https://patchblox.com/security/data/cve/CVE-2026-109706.md) | High | thunderbird: Use-after-free in the Storage: IndexedDB component | 8.2 | 0.0023 | | | [CVE-2026-109726](https://patchblox.com/security/data/cve/CVE-2026-109726.md) | High | thunderbird: Use-after-free in the SVG component | 8.2 | 0.0023 | | | [CVE-2026-109727](https://patchblox.com/security/data/cve/CVE-2026-109727.md) | High | thunderbird: Use-after-free in the Audio/Video component | 8.2 | 0.0023 | | | [CVE-2026-109712](https://patchblox.com/security/data/cve/CVE-2026-109712.md) | High | firefox-esr: Sandbox escape due to uninitialized memory in the Graphics component | 8.8 | 0.0022 | | | [CVE-2026-109711](https://patchblox.com/security/data/cve/CVE-2026-109711.md) | High | thunderbird: Use-after-free in the Graphics: Canvas2D component | 8.8 | 0.0022 | | | [CVE-2026-109713](https://patchblox.com/security/data/cve/CVE-2026-109713.md) | High | thunderbird: Use-after-free in the Crash Reporting component | 8.8 | 0.0022 | | | [CVE-2026-109723](https://patchblox.com/security/data/cve/CVE-2026-109723.md) | High | thunderbird: Integer overflow in the Layout: Text and Fonts component | 8.8 | 0.0022 | | | [CVE-2026-109724](https://patchblox.com/security/data/cve/CVE-2026-109724.md) | High | thunderbird: Use-after-free in the DOM: Core & HTML component | 8.8 | 0.0022 | | | [CVE-2026-109717](https://patchblox.com/security/data/cve/CVE-2026-109717.md) | High | thunderbird: Use-after-free in the DOM: Bindings (WebIDL) component | 8.2 | 0.0022 | | | [CVE-2026-109719](https://patchblox.com/security/data/cve/CVE-2026-109719.md) | High | thunderbird: Race condition, use-after-free in the Graphics: CanvasWebGL component | 8.2 | 0.0017 | | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo