Linux · Security advisory · September 30, 2026
RLSA-2026:73130: thunderbird security update
RLSA-2026:73130, released September 30, 2026, fixes 44 CVEs in thunderbird (version 0:140.16.0-1.el10_2). None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
44
9 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0063
50th percentile
Priority of the 44 CVEs
Patch now 0
Urgent 9
High 35
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| thunderbird | rocky 10 | 0:140.16.0-1.el10_2 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2026-92240 | Out-of-bounds read in IMAP response parser | 9.1 | 0.0063 | None reported | |
| Urgent | CVE-2026-92238 | Ambiguous parsing of mail headers | 9.8 | 0.0054 | None reported | |
| Urgent | CVE-2026-75874 | Sandbox escape in the Remote Settings Client component | 10.0 | 0.0046 | None reported | |
| Urgent | CVE-2026-84143 | Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15 | 9.8 | 0.0038 | None reported | |
| Urgent | CVE-2026-92018 | Sandbox escape in the DOM: Core & HTML component | 9.6 | 0.0033 | None reported | |
| Urgent | CVE-2026-84639 | Uninitialized memory in MIME parsing | 9.1 | 0.0032 | None reported | |
| Urgent | CVE-2026-92032 | Sandbox escape due to invalid pointer in the Graphics component | 9.6 | 0.0032 | None reported | |
| Urgent | CVE-2026-84119 | Sandbox escape due to use-after-free in the DOM: Navigation component | 9.6 | 0.0032 | None reported | |
| Urgent | CVE-2026-84121 | Sandbox escape due to use-after-free in the DOM: Security component | 9.6 | 0.0032 | None reported | |
| High | CVE-2026-92239 | Buffer overrun in IMAP | 8.1 | 0.0041 | None reported | |
| High | CVE-2026-84145 | Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15 | 7.5 | 0.0037 | None reported | |
| High | CVE-2026-92005 | Use-after-free in the Audio/Video: Web Codecs component | 7.5 | 0.0036 | None reported | |
| High | CVE-2026-84131 | Privilege escalation due to invalid pointer in the Graphics component | 8.8 | 0.0033 | None reported | |
| High | CVE-2026-92006 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component | 8.8 | 0.0033 | None reported | |
| High | CVE-2026-92022 | Use-after-free in the DOM: HTML Parser component | 8.8 | 0.0032 | None reported | |
| High | CVE-2026-92023 | Use-after-free in the XML component | 8.8 | 0.0032 | None reported | |
| High | CVE-2026-92024 | Use-after-free in the SVG component | 8.8 | 0.0032 | None reported | |
| High | CVE-2026-92025 | Use-after-free in the DOM: Navigation component | 8.8 | 0.0032 | None reported | |
| High | CVE-2026-92027 | Use-after-free in the DOM: Streams component | 8.8 | 0.0032 | None reported | |
| High | CVE-2026-92028 | Use-after-free in the DOM: Core & HTML component | 8.8 | 0.0032 | None reported | |
| High | CVE-2026-92029 | Use-after-free in the SVG component | 8.8 | 0.0032 | None reported | |
| High | CVE-2026-92016 | Use-after-free in the Disability Access APIs component | 8.8 | 0.0031 | None reported | |
| High | CVE-2026-92026 | Use-after-free in the Networking component | 8.8 | 0.0031 | None reported | |
| High | CVE-2026-92019 | Mitigation bypass in the Remote Settings Client component | 8.1 | 0.0031 | None reported | |
| High | CVE-2026-92031 | Information disclosure in the Graphics: ImageLib component | 7.5 | 0.0031 | None reported |
Showing 1 to 25 of 44
1Next