Linux · Security advisory · March 12, 2026
RHSA-2026:3516: thunderbird security update
RHSA-2026:3516, released March 12, 2026, fixes 38 CVEs in thunderbird (version 0:140.8.0-1.el9_7). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
38
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0092
60th percentile
Priority of the 38 CVEs
Patch now 0
Urgent 0
High 38
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| thunderbird | RHEL 9 | 0:140.8.0-1.el9_7 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2026-2773 | Incorrect boundary conditions in the Web Audio component | 9.8 | 0.0092 | None reported | |
| High | CVE-2026-2774 | Integer overflow in the Audio/Video component | 9.8 | 0.0085 | None reported | |
| High | CVE-2026-2775 | Mitigation bypass in the DOM: HTML Parser component | 9.8 | 0.0084 | None reported | |
| High | CVE-2026-2771 | Undefined behavior in the DOM: Core & HTML component | 9.8 | 0.0076 | None reported | |
| High | CVE-2026-2763 | Use-after-free in the JavaScript Engine component | 9.8 | 0.0074 | None reported | |
| High | CVE-2026-2764 | JIT miscompilation, use-after-free in the JavaScript Engine: JIT component | 9.8 | 0.0074 | None reported | |
| High | CVE-2026-2765 | Use-after-free in the JavaScript Engine component | 9.8 | 0.0074 | None reported | |
| High | CVE-2026-2766 | Use-after-free in the JavaScript Engine: JIT component | 9.8 | 0.0074 | None reported | |
| High | CVE-2026-2770 | Use-after-free in the DOM: Bindings (WebIDL) component | 9.8 | 0.0074 | None reported | |
| High | CVE-2026-2772 | Use-after-free in the Audio/Video: Playback component | 9.8 | 0.0074 | None reported | |
| High | CVE-2026-2447 | Heap buffer overflow in libvpx | 8.8 | 0.0070 | None reported | |
| High | CVE-2026-2779 | Incorrect boundary conditions in the Networking: JAR component | 9.8 | 0.0069 | None reported | |
| High | CVE-2026-2769 | Use-after-free in the Storage: IndexedDB component | 8.8 | 0.0069 | None reported | |
| High | CVE-2026-2788 | Incorrect boundary conditions in the Audio/Video: GMP component | 9.8 | 0.0068 | None reported | |
| High | CVE-2026-2787 | Use-after-free in the DOM: Window and Location component | 9.8 | 0.0064 | None reported | |
| High | CVE-2026-2762 | Integer overflow in the JavaScript: Standard Library component | 9.8 | 0.0063 | None reported | |
| High | CVE-2026-2791 | Mitigation bypass in the Networking: Cache component | 9.8 | 0.0060 | None reported | |
| High | CVE-2026-2757 | Incorrect boundary conditions in the WebRTC: Audio/Video component | 9.8 | 0.0059 | None reported | |
| High | CVE-2026-2785 | Invalid pointer in the JavaScript Engine component | 9.8 | 0.0058 | None reported | |
| High | CVE-2026-2758 | Use-after-free in the JavaScript: GC component | 9.8 | 0.0057 | None reported | |
| High | CVE-2026-2776 | Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software | 10.0 | 0.0056 | None reported | |
| High | CVE-2026-2778 | Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component | 10.0 | 0.0056 | None reported | |
| High | CVE-2026-2789 | Use-after-free in the Graphics: ImageLib component | 9.8 | 0.0053 | None reported | |
| High | CVE-2026-2786 | Use-after-free in the JavaScript Engine component | 9.8 | 0.0051 | None reported | |
| High | CVE-2026-2784 | Mitigation bypass in the DOM: Security component | 9.8 | 0.0049 | None reported |
Showing 1 to 25 of 38
1Next