Linux · Security advisory · April 15, 2026
RHSA-2026:8315: thunderbird security update
RHSA-2026:8315, released April 15, 2026, fixes 39 CVEs in thunderbird (version 140.9.0-1.el10_0). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
39
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0097
61st percentile
Priority of the 39 CVEs
Patch now 0
Urgent 0
High 39
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| thunderbird | RHEL 10 | 140.9.0-1.el10_0 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2026-4696 | Use-after-free in the Layout: Text and Fonts component | 9.8 | 0.0097 | None reported | |
| High | CVE-2026-4700 | Mitigation bypass in the Networking: HTTP component | 9.8 | 0.0092 | None reported | |
| High | CVE-2026-4690 | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component | 8.6 | 0.0080 | None reported | |
| High | CVE-2026-4694 | Incorrect boundary conditions, integer overflow in the Graphics component | 8.2 | 0.0080 | None reported | |
| High | CVE-2026-4698 | JIT miscompilation in the JavaScript Engine: JIT component | 9.8 | 0.0079 | None reported | |
| High | CVE-2026-4686 | Incorrect boundary conditions in the Graphics: Canvas2D component | 8.2 | 0.0073 | None reported | |
| High | CVE-2026-4685 | Incorrect boundary conditions in the Graphics: Canvas2D component | 8.2 | 0.0071 | None reported | |
| High | CVE-2026-4693 | Incorrect boundary conditions in the Audio/Video: Playback component | 8.2 | 0.0071 | None reported | |
| High | CVE-2026-4695 | Incorrect boundary conditions in the Audio/Video: Web Codecs component | 8.2 | 0.0071 | None reported | |
| High | CVE-2026-4697 | Incorrect boundary conditions in the Audio/Video: Web Codecs component | 8.2 | 0.0071 | None reported | |
| High | CVE-2026-4699 | Incorrect boundary conditions in the Layout: Text and Fonts component | 8.2 | 0.0071 | None reported | |
| High | CVE-2026-4702 | JIT miscompilation in the JavaScript Engine component | 9.8 | 0.0070 | None reported | |
| High | CVE-2026-4689 | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component | 10.0 | 0.0069 | None reported | |
| High | CVE-2026-4705 | Undefined behavior in the WebRTC: Signaling component | 9.8 | 0.0066 | None reported | |
| High | CVE-2026-4704 | Denial-of-service in the WebRTC: Signaling component | 8.2 | 0.0065 | None reported | |
| High | CVE-2026-4707 | Incorrect boundary conditions in the Graphics: Canvas2D component | 8.2 | 0.0060 | None reported | |
| High | CVE-2026-4687 | Sandbox escape due to incorrect boundary conditions in the Telemetry component | 8.6 | 0.0056 | None reported | |
| High | CVE-2026-4688 | Sandbox escape due to use-after-free in the Disability Access APIs component | 10.0 | 0.0055 | None reported | |
| High | CVE-2026-4692 | Sandbox escape in the Responsive Design Mode component | 10.0 | 0.0051 | None reported | |
| High | CVE-2026-4691 | Use-after-free in the CSS Parsing and Computation component | 9.8 | 0.0050 | None reported | |
| High | CVE-2026-4709 | Incorrect boundary conditions in the Audio/Video: GMP component | 8.2 | 0.0048 | None reported | |
| High | CVE-2026-4718 | Undefined behavior in the WebRTC: Signaling component | 8.2 | 0.0048 | None reported | |
| High | CVE-2026-4701 | Use-after-free in the JavaScript Engine component | 9.8 | 0.0048 | None reported | |
| High | CVE-2026-4706 | Incorrect boundary conditions in the Graphics: Canvas2D component | 8.2 | 0.0047 | None reported | |
| High | CVE-2026-4708 | Incorrect boundary conditions in the Graphics component | 8.2 | 0.0045 | None reported |
Showing 1 to 25 of 39
1Next