Vulnerability-Lookup

alsa-2026:2271

Vulnerability from osv_almalinux

Published

2026-02-09 00:00

Modified

2026-02-09 11:39

Summary

Important: firefox security update

Details

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: Spoofing issue in the Downloads Panel component (CVE-2025-14327)
firefox: Use-after-free in the JavaScript: GC component (CVE-2026-0885)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 (CVE-2026-0891)
firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-0878)
firefox: Use-after-free in the IPC component (CVE-2026-0882)
firefox: Use-after-free in the JavaScript Engine component (CVE-2026-0884)
firefox: Information disclosure in the Networking component (CVE-2026-0883)
firefox: Mitigation bypass in the DOM: Security component (CVE-2026-0877)
firefox: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-0890)
firefox: Clickjacking issue, information disclosure in the PDF Viewer component (CVE-2026-0887)
firefox: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-0879)
firefox: Sandbox escape due to integer overflow in the Graphics component (CVE-2026-0880)
firefox: Incorrect boundary conditions in the Graphics component (CVE-2026-0886)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

URL

Type

	https://access.redhat.com/errata/RHSA-2026:2271	ADVISORY
	https://access.redhat.com/security/cve/CVE-2025-14327	REPORT
	https://access.redhat.com/security/cve/CVE-2026-0877	REPORT
	https://access.redhat.com/security/cve/CVE-2026-0878	REPORT
	https://access.redhat.com/security/cve/CVE-2026-0879	REPORT
	https://access.redhat.com/security/cve/CVE-2026-0880	REPORT
	https://access.redhat.com/security/cve/CVE-2026-0882	REPORT
	https://access.redhat.com/security/cve/CVE-2026-0883	REPORT
	https://access.redhat.com/security/cve/CVE-2026-0884	REPORT
	https://access.redhat.com/security/cve/CVE-2026-0885	REPORT
	https://access.redhat.com/security/cve/CVE-2026-0886	REPORT
	https://access.redhat.com/security/cve/CVE-2026-0887	REPORT
	https://access.redhat.com/security/cve/CVE-2026-0890	REPORT
	https://access.redhat.com/security/cve/CVE-2026-0891	REPORT
	https://bugzilla.redhat.com/2420507	REPORT
	https://bugzilla.redhat.com/2428961	REPORT
	https://bugzilla.redhat.com/2428963	REPORT
	https://bugzilla.redhat.com/2428965	REPORT
	https://bugzilla.redhat.com/2428966	REPORT
	https://bugzilla.redhat.com/2428967	REPORT
	https://bugzilla.redhat.com/2428968	REPORT
	https://bugzilla.redhat.com/2428969	REPORT
	https://bugzilla.redhat.com/2428971	REPORT
	https://bugzilla.redhat.com/2428972	REPORT
	https://bugzilla.redhat.com/2428973	REPORT
	https://bugzilla.redhat.com/2428975	REPORT
	https://bugzilla.redhat.com/2428978	REPORT
	https://errata.almalinux.org/10/ALSA-2026-2271.html	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:10",
        "name": "firefox"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "140.7.0-1.el10_1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: Spoofing issue in the Downloads Panel component (CVE-2025-14327)\n  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-0885)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 (CVE-2026-0891)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-0878)\n  * firefox: Use-after-free in the IPC component (CVE-2026-0882)\n  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-0884)\n  * firefox: Information disclosure in the Networking component (CVE-2026-0883)\n  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-0877)\n  * firefox: Spoofing issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component (CVE-2026-0890)\n  * firefox: Clickjacking issue, information disclosure in the PDF Viewer component (CVE-2026-0887)\n  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-0879)\n  * firefox: Sandbox escape due to integer overflow in the Graphics component (CVE-2026-0880)\n  * firefox: Incorrect boundary conditions in the Graphics component (CVE-2026-0886)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
  "id": "ALSA-2026:2271",
  "modified": "2026-02-09T11:39:07Z",
  "published": "2026-02-09T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2026:2271"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2025-14327"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-0877"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-0878"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-0879"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-0880"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-0882"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-0883"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-0884"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-0885"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-0886"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-0887"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-0890"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-0891"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2420507"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2428961"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2428963"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2428965"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2428966"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2428967"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2428968"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2428969"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2428971"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2428972"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2428973"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2428975"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2428978"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/10/ALSA-2026-2271.html"
    }
  ],
  "related": [
    "CVE-2025-14327",
    "CVE-2026-0885",
    "CVE-2026-0891",
    "CVE-2026-0878",
    "CVE-2026-0882",
    "CVE-2026-0884",
    "CVE-2026-0883",
    "CVE-2026-0877",
    "CVE-2026-0890",
    "CVE-2026-0887",
    "CVE-2026-0879",
    "CVE-2026-0880",
    "CVE-2026-0886"
  ],
  "summary": "Important: firefox security update"
}

CVE-2026-0887 (GCVE-0-2026-0887)

Vulnerability from cvelistv5 – Published: 2026-01-13 13:30 – Updated: 2026-04-13 13:51

Title

Clickjacking issue, information disclosure in the PDF Viewer component

Summary

Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE

CWE-497 - Exposure of Sensitive System Information to an Unauthorized Control Sphere

Assigner

mozilla

References

5 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=2006500
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 140.7 , ≤ 140.* (rpm) Unaffected: 147 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.7 , ≤ 140.* (rpm) Unaffected: 147 , ≤ * (rpm)

Credits

Lyra Rebane

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-0887",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-15T15:32:40.994965Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-497",
                "description": "CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-15T15:32:44.439Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.7",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "147",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.7",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "147",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Lyra Rebane"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
            }
          ],
          "value": "Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T13:51:59.523Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2006500"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-03/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-05/"
        }
      ],
      "title": "Clickjacking issue, information disclosure in the PDF Viewer component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-0887",
    "datePublished": "2026-01-13T13:30:57.847Z",
    "dateReserved": "2026-01-13T13:30:57.650Z",
    "dateUpdated": "2026-04-13T13:51:59.523Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0890 (GCVE-0-2026-0890)

Vulnerability from cvelistv5 – Published: 2026-01-13 13:30 – Updated: 2026-04-13 13:52

Title

Spoofing issue in the DOM: Copy & Paste and Drag & Drop component

Summary

Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.

Severity

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

CWE

CWE-290 - Authentication Bypass by Spoofing

Assigner

mozilla

References

5 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=2005081
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 140.7 , ≤ 140.* (rpm) Unaffected: 147 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.7 , ≤ 140.* (rpm) Unaffected: 147 , ≤ * (rpm)

Credits

Edgar Chen

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 5.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-0890",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-15T15:30:33.018220Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-290",
                "description": "CWE-290 Authentication Bypass by Spoofing",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-15T15:30:48.870Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.7",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "147",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.7",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "147",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Edgar Chen"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Spoofing issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
            }
          ],
          "value": "Spoofing issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T13:52:07.852Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2005081"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-03/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-05/"
        }
      ],
      "title": "Spoofing issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-0890",
    "datePublished": "2026-01-13T13:30:59.089Z",
    "dateReserved": "2026-01-13T13:30:58.912Z",
    "dateUpdated": "2026-04-13T13:52:07.852Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0891 (GCVE-0-2026-0891)

Vulnerability from cvelistv5 – Published: 2026-01-13 13:30 – Updated: 2026-04-13 13:52

Title

Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147

Summary

Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

mozilla

References

5 references

URL	Tags
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 140.7 , ≤ 140.* (rpm) Unaffected: 147 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.7 , ≤ 140.* (rpm) Unaffected: 147 , ≤ * (rpm)

Credits

Andrew McCreight, Dennis Jackson and the Mozilla Fuzzing Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-0891",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-15T04:56:05.302771Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T15:04:47.027Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.7",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "147",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.7",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "147",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Andrew McCreight, Dennis Jackson and the Mozilla Fuzzing Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
            }
          ],
          "value": "Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T13:52:10.334Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1964722%2C2000981%2C2003100%2C2003278"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-03/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-05/"
        }
      ],
      "title": "Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-0891",
    "datePublished": "2026-01-13T13:30:59.454Z",
    "dateReserved": "2026-01-13T13:30:59.286Z",
    "dateUpdated": "2026-04-13T13:52:10.334Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

alsa-2026:2271

Vulnerability from osv_almalinux

CVE-2026-0887 (GCVE-0-2026-0887)

CVE-2026-0890 (GCVE-0-2026-0890)

CVE-2026-0891 (GCVE-0-2026-0891)

Tags

Sightings

Nomenclature