RHSA-2026:99572
Vulnerability from csaf_redhat - Published: 2026-11-12 10:16 - Updated: 2026-11-12 17:26Summary
Red Hat Security Advisory: firefox security update
Severity
Important
Notes
Topic: An update for firefox is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
Security Fix(es):
* firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-118007)
* firefox: thunderbird: Sandbox escape due to use-after-free in the XPCOM component (CVE-2026-118021)
* firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-118024)
* firefox: thunderbird: Race condition, use-after-free in the DOM: File component (CVE-2026-118019)
* firefox: thunderbird: Use-after-free in the Audio/Video component (CVE-2026-124860)
* firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-124914)
* firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-124869)
* firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-124854)
* firefox: thunderbird: Use-after-free in the Layout: Positioned component (CVE-2026-124877)
* firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-124917)
* firefox: thunderbird: Incorrect boundary conditions in the DOM: Selection component (CVE-2026-124891)
* firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-124857)
* firefox: thunderbird: Information disclosure in the Security: RLBox component (CVE-2026-124941)
* firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-124855)
* firefox: thunderbird: Spoofing issue in the Security component (CVE-2026-124934)
* firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component (CVE-2026-124853)
* firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-124905)
* firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component (CVE-2026-124859)
* firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124881)
* firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-124862)
* firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124882)
* firefox: thunderbird: Information disclosure in the Private Browsing component (CVE-2026-124909)
* firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124876)
* firefox: thunderbird: Use-after-free in the DOM: Workers component (CVE-2026-124893)
* firefox: thunderbird: Use-after-free in the Graphics: WebRender component (CVE-2026-124906)
* firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-124887)
* firefox: thunderbird: Mitigation bypass in the WebExtensions component (CVE-2026-124910)
* firefox: thunderbird: Privilege escalation in the Nimbus Desktop Client component (CVE-2026-124951)
* firefox: thunderbird: Use-after-free in the Audio/Video component (CVE-2026-124865)
* firefox: thunderbird: Incorrect boundary conditions, use-after-free in the Graphics component (CVE-2026-124948)
* firefox: thunderbird: Undefined behavior in the WebRTC: Networking component (CVE-2026-124935)
* firefox: thunderbird: Incorrect boundary conditions in the DOM: CSS Object Model component (CVE-2026-124875)
* firefox: thunderbird: Sandbox escape due to use-after-free in the IPC component (CVE-2026-124903)
* firefox: thunderbird: Incorrect boundary conditions in the Networking: HTTP component (CVE-2026-124856)
* firefox: thunderbird: Use-after-free in the Networking: Cookies component (CVE-2026-124894)
* firefox: thunderbird: Use-after-free in the Storage: localStorage & sessionStorage component (CVE-2026-124895)
* firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-124885)
* firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-124899)
* firefox: thunderbird: Sandbox escape in the Console component (CVE-2026-124933)
* firefox: thunderbird: Use-after-free in the Layout component (CVE-2026-124866)
* firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-124883)
* firefox: thunderbird: Information disclosure in the Layout: Form Controls component (CVE-2026-124929)
* firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component (CVE-2026-124870)
* firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-124927)
* firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebGPU component (CVE-2026-124915)
* firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-124890)
* firefox: thunderbird: Information disclosure in the Address Bar component (CVE-2026-124930)
* firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component (CVE-2026-124886)
* firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-124858)
* firefox: thunderbird: Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component (CVE-2026-124907)
* firefox: thunderbird: Invalid pointer in the DOM: Editor component (CVE-2026-124873)
* firefox: thunderbird: Spoofing issue in the DOM: Security component (CVE-2026-124912)
* firefox: thunderbird: Same-origin policy bypass in the Networking: HTTP component (CVE-2026-124874)
* firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-124892)
* firefox: thunderbird: Invalid pointer in the DOM: Streams component (CVE-2026-124942)
* firefox: thunderbird: Use-after-free in the CSS Transitions and Animations component (CVE-2026-124922)
* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-124918)
* firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-124884)
* firefox: thunderbird: Incorrect boundary conditions in the DOM: Core & HTML component (CVE-2026-124868)
* firefox: thunderbird: Privilege escalation due to use-after-free in the WebRTC: Networking component (CVE-2026-124919)
* firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-124924)
* firefox: thunderbird: Same-origin policy bypass due to race condition in the Audio/Video component (CVE-2026-124902)
* firefox: thunderbird: Invalid pointer in the Networking: Cache component (CVE-2026-124879)
* firefox: thunderbird: Use-after-free in the Graphics component (CVE-2026-124932)
* firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-124940)
* firefox: thunderbird: Same-origin policy bypass in the DOM: Core & HTML component (CVE-2026-124931)
* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-124926)
* firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-124863)
* firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124889)
* firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-124913)
* firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-124897)
* firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Service Workers component (CVE-2026-124864)
* firefox: thunderbird: Use-after-free in the Cycle Collector component (CVE-2026-124872)
* firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-124880)
* firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component (CVE-2026-124896)
* firefox: thunderbird: Other issue in the Networking: JAR component (CVE-2026-124901)
* firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-124888)
* firefox: thunderbird: Mitigation bypass in the Add-ons Manager component (CVE-2026-124938)
* firefox: thunderbird: Sandbox escape due to use-after-free in the Audio/Video: cubeb component (CVE-2026-124861)
* firefox: thunderbird: Use-after-free in the DOM: Editor component (CVE-2026-124898)
* firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-124939)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component
7.5 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Race condition, use-after-free in the DOM: File component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the XPCOM component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Text component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Navigation component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Networking: HTTP component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Canvas2D component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: HTML Parser component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Audio/Video: cubeb component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: HTML Parser component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Service Workers component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the DOM: Core & HTML component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript: GC component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Cycle Collector component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the DOM: Editor component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: HTTP component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the DOM: CSS Object Model component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the CSS Parsing and Computation component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Positioned component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the Networking: Cache component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the CSS Parsing and Computation component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the CSS Parsing and Computation component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Text component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the Layout: Text and Fonts component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Layout: Text and Fonts component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Layout: Text and Fonts component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the CSS Parsing and Computation component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the DOM: Selection component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Workers component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Networking: Cookies component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Storage: localStorage & sessionStorage component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the Layout: Text and Fonts component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Editor component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Other issue in the Networking: JAR component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass due to race condition in the Audio/Video component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the IPC component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Navigation component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: WebRender component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component
7.5 (High)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Private Browsing component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the WebExtensions component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the DOM: Security component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Networking component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the DOM: Navigation component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics: WebGPU component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Widget: Gtk component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to use-after-free in the WebRTC: Networking component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the CSS Transitions and Animations component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics: WebRender component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the WebRTC component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics: WebRender component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Layout: Form Controls component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Address Bar component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Core & HTML component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Console component
6.1 (Medium)
Affected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the Security component
CWE-290 - Authentication Bypass by SpoofingAffected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Low
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Undefined behavior in the WebRTC: Networking component
CWE-475 - Undefined Behavior for Input to APIAffected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Low
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Add-ons Manager component
CWE-497 - Exposure of Sensitive System Information to an Unauthorized Control SphereAffected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Low
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component
CWE-843 - Access of Resource Using Incompatible TypeAffected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Low
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the File Handling component
CWE-807 - Reliance on Untrusted Inputs in a Security DecisionAffected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Low
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Security: RLBox component
CWE-653 - Improper Isolation or CompartmentalizationAffected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Low
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the DOM: Streams component
CWE-763 - Release of Invalid Pointer or ReferenceAffected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Low
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions, use-after-free in the Graphics component
CWE-825 - Expired Pointer DereferenceAffected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Low
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Nimbus Desktop Client component
CWE-266 - Incorrect Privilege AssignmentAffected products
Fixed
13 products, the same list as for
CVE-2026-118007
Threats
Impact
Low
References
578 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for firefox is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-118007)\n\n* firefox: thunderbird: Sandbox escape due to use-after-free in the XPCOM component (CVE-2026-118021)\n\n* firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-118024)\n\n* firefox: thunderbird: Race condition, use-after-free in the DOM: File component (CVE-2026-118019)\n\n* firefox: thunderbird: Use-after-free in the Audio/Video component (CVE-2026-124860)\n\n* firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-124914)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-124869)\n\n* firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-124854)\n\n* firefox: thunderbird: Use-after-free in the Layout: Positioned component (CVE-2026-124877)\n\n* firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-124917)\n\n* firefox: thunderbird: Incorrect boundary conditions in the DOM: Selection component (CVE-2026-124891)\n\n* firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-124857)\n\n* firefox: thunderbird: Information disclosure in the Security: RLBox component (CVE-2026-124941)\n\n* firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-124855)\n\n* firefox: thunderbird: Spoofing issue in the Security component (CVE-2026-124934)\n\n* firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component (CVE-2026-124853)\n\n* firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-124905)\n\n* firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component (CVE-2026-124859)\n\n* firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124881)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-124862)\n\n* firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124882)\n\n* firefox: thunderbird: Information disclosure in the Private Browsing component (CVE-2026-124909)\n\n* firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124876)\n\n* firefox: thunderbird: Use-after-free in the DOM: Workers component (CVE-2026-124893)\n\n* firefox: thunderbird: Use-after-free in the Graphics: WebRender component (CVE-2026-124906)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-124887)\n\n* firefox: thunderbird: Mitigation bypass in the WebExtensions component (CVE-2026-124910)\n\n* firefox: thunderbird: Privilege escalation in the Nimbus Desktop Client component (CVE-2026-124951)\n\n* firefox: thunderbird: Use-after-free in the Audio/Video component (CVE-2026-124865)\n\n* firefox: thunderbird: Incorrect boundary conditions, use-after-free in the Graphics component (CVE-2026-124948)\n\n* firefox: thunderbird: Undefined behavior in the WebRTC: Networking component (CVE-2026-124935)\n\n* firefox: thunderbird: Incorrect boundary conditions in the DOM: CSS Object Model component (CVE-2026-124875)\n\n* firefox: thunderbird: Sandbox escape due to use-after-free in the IPC component (CVE-2026-124903)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Networking: HTTP component (CVE-2026-124856)\n\n* firefox: thunderbird: Use-after-free in the Networking: Cookies component (CVE-2026-124894)\n\n* firefox: thunderbird: Use-after-free in the Storage: localStorage \u0026 sessionStorage component (CVE-2026-124895)\n\n* firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-124885)\n\n* firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-124899)\n\n* firefox: thunderbird: Sandbox escape in the Console component (CVE-2026-124933)\n\n* firefox: thunderbird: Use-after-free in the Layout component (CVE-2026-124866)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-124883)\n\n* firefox: thunderbird: Information disclosure in the Layout: Form Controls component (CVE-2026-124929)\n\n* firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component (CVE-2026-124870)\n\n* firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-124927)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebGPU component (CVE-2026-124915)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-124890)\n\n* firefox: thunderbird: Information disclosure in the Address Bar component (CVE-2026-124930)\n\n* firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component (CVE-2026-124886)\n\n* firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-124858)\n\n* firefox: thunderbird: Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component (CVE-2026-124907)\n\n* firefox: thunderbird: Invalid pointer in the DOM: Editor component (CVE-2026-124873)\n\n* firefox: thunderbird: Spoofing issue in the DOM: Security component (CVE-2026-124912)\n\n* firefox: thunderbird: Same-origin policy bypass in the Networking: HTTP component (CVE-2026-124874)\n\n* firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-124892)\n\n* firefox: thunderbird: Invalid pointer in the DOM: Streams component (CVE-2026-124942)\n\n* firefox: thunderbird: Use-after-free in the CSS Transitions and Animations component (CVE-2026-124922)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-124918)\n\n* firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-124884)\n\n* firefox: thunderbird: Incorrect boundary conditions in the DOM: Core \u0026 HTML component (CVE-2026-124868)\n\n* firefox: thunderbird: Privilege escalation due to use-after-free in the WebRTC: Networking component (CVE-2026-124919)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-124924)\n\n* firefox: thunderbird: Same-origin policy bypass due to race condition in the Audio/Video component (CVE-2026-124902)\n\n* firefox: thunderbird: Invalid pointer in the Networking: Cache component (CVE-2026-124879)\n\n* firefox: thunderbird: Use-after-free in the Graphics component (CVE-2026-124932)\n\n* firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-124940)\n\n* firefox: thunderbird: Same-origin policy bypass in the DOM: Core \u0026 HTML component (CVE-2026-124931)\n\n* firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-124926)\n\n* firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-124863)\n\n* firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124889)\n\n* firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-124913)\n\n* firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-124897)\n\n* firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Service Workers component (CVE-2026-124864)\n\n* firefox: thunderbird: Use-after-free in the Cycle Collector component (CVE-2026-124872)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-124880)\n\n* firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component (CVE-2026-124896)\n\n* firefox: thunderbird: Other issue in the Networking: JAR component (CVE-2026-124901)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-124888)\n\n* firefox: thunderbird: Mitigation bypass in the Add-ons Manager component (CVE-2026-124938)\n\n* firefox: thunderbird: Sandbox escape due to use-after-free in the Audio/Video: cubeb component (CVE-2026-124861)\n\n* firefox: thunderbird: Use-after-free in the DOM: Editor component (CVE-2026-124898)\n\n* firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-124939)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:99572",
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2562015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562015"
},
{
"category": "external",
"summary": "2562042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562042"
},
{
"category": "external",
"summary": "2562122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562122"
},
{
"category": "external",
"summary": "2562259",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562259"
},
{
"category": "external",
"summary": "2569830",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569830"
},
{
"category": "external",
"summary": "2569846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569846"
},
{
"category": "external",
"summary": "2569877",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569877"
},
{
"category": "external",
"summary": "2569907",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569907"
},
{
"category": "external",
"summary": "2569955",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569955"
},
{
"category": "external",
"summary": "2569957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569957"
},
{
"category": "external",
"summary": "2569970",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569970"
},
{
"category": "external",
"summary": "2569978",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569978"
},
{
"category": "external",
"summary": "2569982",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569982"
},
{
"category": "external",
"summary": "2569985",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569985"
},
{
"category": "external",
"summary": "2569994",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569994"
},
{
"category": "external",
"summary": "2570012",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570012"
},
{
"category": "external",
"summary": "2570014",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570014"
},
{
"category": "external",
"summary": "2570100",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570100"
},
{
"category": "external",
"summary": "2570107",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570107"
},
{
"category": "external",
"summary": "2570116",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570116"
},
{
"category": "external",
"summary": "2570127",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570127"
},
{
"category": "external",
"summary": "2570137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570137"
},
{
"category": "external",
"summary": "2570140",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570140"
},
{
"category": "external",
"summary": "2570149",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570149"
},
{
"category": "external",
"summary": "2570165",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570165"
},
{
"category": "external",
"summary": "2570172",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570172"
},
{
"category": "external",
"summary": "2570208",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570208"
},
{
"category": "external",
"summary": "2570241",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570241"
},
{
"category": "external",
"summary": "2570248",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570248"
},
{
"category": "external",
"summary": "2570255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570255"
},
{
"category": "external",
"summary": "2570306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570306"
},
{
"category": "external",
"summary": "2570334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570334"
},
{
"category": "external",
"summary": "2570365",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570365"
},
{
"category": "external",
"summary": "2570417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570417"
},
{
"category": "external",
"summary": "2570433",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570433"
},
{
"category": "external",
"summary": "2570440",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570440"
},
{
"category": "external",
"summary": "2570491",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570491"
},
{
"category": "external",
"summary": "2570514",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570514"
},
{
"category": "external",
"summary": "2570521",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570521"
},
{
"category": "external",
"summary": "2570548",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570548"
},
{
"category": "external",
"summary": "2570574",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570574"
},
{
"category": "external",
"summary": "2570589",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570589"
},
{
"category": "external",
"summary": "2570601",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570601"
},
{
"category": "external",
"summary": "2570629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570629"
},
{
"category": "external",
"summary": "2570636",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570636"
},
{
"category": "external",
"summary": "2570644",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570644"
},
{
"category": "external",
"summary": "2570655",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570655"
},
{
"category": "external",
"summary": "2570660",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570660"
},
{
"category": "external",
"summary": "2570662",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570662"
},
{
"category": "external",
"summary": "2570664",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570664"
},
{
"category": "external",
"summary": "2570686",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570686"
},
{
"category": "external",
"summary": "2570704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570704"
},
{
"category": "external",
"summary": "2570705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570705"
},
{
"category": "external",
"summary": "2570717",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570717"
},
{
"category": "external",
"summary": "2570726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570726"
},
{
"category": "external",
"summary": "2570740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570740"
},
{
"category": "external",
"summary": "2570753",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570753"
},
{
"category": "external",
"summary": "2570755",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570755"
},
{
"category": "external",
"summary": "2570770",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570770"
},
{
"category": "external",
"summary": "2570787",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570787"
},
{
"category": "external",
"summary": "2570811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570811"
},
{
"category": "external",
"summary": "2570824",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570824"
},
{
"category": "external",
"summary": "2570865",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570865"
},
{
"category": "external",
"summary": "2570876",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570876"
},
{
"category": "external",
"summary": "2570896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570896"
},
{
"category": "external",
"summary": "2570942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570942"
},
{
"category": "external",
"summary": "2570955",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570955"
},
{
"category": "external",
"summary": "2571008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571008"
},
{
"category": "external",
"summary": "2571031",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571031"
},
{
"category": "external",
"summary": "2571052",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571052"
},
{
"category": "external",
"summary": "2571076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571076"
},
{
"category": "external",
"summary": "2571102",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571102"
},
{
"category": "external",
"summary": "2571104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571104"
},
{
"category": "external",
"summary": "2571112",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571112"
},
{
"category": "external",
"summary": "2571117",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571117"
},
{
"category": "external",
"summary": "2571125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571125"
},
{
"category": "external",
"summary": "2571126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571126"
},
{
"category": "external",
"summary": "2571146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571146"
},
{
"category": "external",
"summary": "2571152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571152"
},
{
"category": "external",
"summary": "2571158",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571158"
},
{
"category": "external",
"summary": "2571162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571162"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99572.json"
}
],
"title": "Red Hat Security Advisory: firefox security update",
"tracking": {
"current_release_date": "2026-11-12T17:26:39+00:00",
"generator": {
"date": "2026-11-12T17:26:39+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.5"
}
},
"id": "RHSA-2026:99572",
"initial_release_date": "2026-11-12T10:16:20+00:00",
"revision_history": [
{
"date": "2026-11-12T10:16:20+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-11-12T10:16:20+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-12T17:26:39+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.3.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.3"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:153.7.0-1.el10_3.src",
"product": {
"name": "firefox-0:153.7.0-1.el10_3.src",
"product_id": "firefox-0:153.7.0-1.el10_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@153.7.0-1.el10_3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:153.7.0-1.el10_3.aarch64",
"product": {
"name": "firefox-0:153.7.0-1.el10_3.aarch64",
"product_id": "firefox-0:153.7.0-1.el10_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@153.7.0-1.el10_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"product": {
"name": "firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"product_id": "firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@153.7.0-1.el10_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"product": {
"name": "firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"product_id": "firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@153.7.0-1.el10_3?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:153.7.0-1.el10_3.ppc64le",
"product": {
"name": "firefox-0:153.7.0-1.el10_3.ppc64le",
"product_id": "firefox-0:153.7.0-1.el10_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@153.7.0-1.el10_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"product": {
"name": "firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"product_id": "firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@153.7.0-1.el10_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"product": {
"name": "firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"product_id": "firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@153.7.0-1.el10_3?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:153.7.0-1.el10_3.s390x",
"product": {
"name": "firefox-0:153.7.0-1.el10_3.s390x",
"product_id": "firefox-0:153.7.0-1.el10_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@153.7.0-1.el10_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"product": {
"name": "firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"product_id": "firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@153.7.0-1.el10_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"product": {
"name": "firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"product_id": "firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@153.7.0-1.el10_3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:153.7.0-1.el10_3.x86_64",
"product": {
"name": "firefox-0:153.7.0-1.el10_3.x86_64",
"product_id": "firefox-0:153.7.0-1.el10_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@153.7.0-1.el10_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:153.7.0-1.el10_3.x86_64",
"product": {
"name": "firefox-debugsource-0:153.7.0-1.el10_3.x86_64",
"product_id": "firefox-debugsource-0:153.7.0-1.el10_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@153.7.0-1.el10_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"product": {
"name": "firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"product_id": "firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@153.7.0-1.el10_3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:153.7.0-1.el10_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64"
},
"product_reference": "firefox-0:153.7.0-1.el10_3.aarch64",
"relates_to_product_reference": "AppStream-10.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:153.7.0-1.el10_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le"
},
"product_reference": "firefox-0:153.7.0-1.el10_3.ppc64le",
"relates_to_product_reference": "AppStream-10.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:153.7.0-1.el10_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x"
},
"product_reference": "firefox-0:153.7.0-1.el10_3.s390x",
"relates_to_product_reference": "AppStream-10.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:153.7.0-1.el10_3.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src"
},
"product_reference": "firefox-0:153.7.0-1.el10_3.src",
"relates_to_product_reference": "AppStream-10.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:153.7.0-1.el10_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64"
},
"product_reference": "firefox-0:153.7.0-1.el10_3.x86_64",
"relates_to_product_reference": "AppStream-10.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:153.7.0-1.el10_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64"
},
"product_reference": "firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"relates_to_product_reference": "AppStream-10.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le"
},
"product_reference": "firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"relates_to_product_reference": "AppStream-10.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:153.7.0-1.el10_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x"
},
"product_reference": "firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"relates_to_product_reference": "AppStream-10.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:153.7.0-1.el10_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64"
},
"product_reference": "firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"relates_to_product_reference": "AppStream-10.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:153.7.0-1.el10_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64"
},
"product_reference": "firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"relates_to_product_reference": "AppStream-10.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:153.7.0-1.el10_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le"
},
"product_reference": "firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"relates_to_product_reference": "AppStream-10.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:153.7.0-1.el10_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x"
},
"product_reference": "firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"relates_to_product_reference": "AppStream-10.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:153.7.0-1.el10_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
},
"product_reference": "firefox-debugsource-0:153.7.0-1.el10_3.x86_64",
"relates_to_product_reference": "AppStream-10.3.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-118007",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-10-27T14:44:27.706107+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2562015"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the JavaScript: GC component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the JavaScript: GC component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-118007"
},
{
"category": "external",
"summary": "RHBZ#2562015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-118007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118007"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-118007",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118007"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-118/#CVE-2026-118007",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-118/#CVE-2026-118007"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-121/#CVE-2026-118007",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-121/#CVE-2026-118007"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-118007",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-118007"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-118007",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-118007"
}
],
"release_date": "2026-10-27T14:05:59.029000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
},
{
"category": "workaround",
"details": "--- CME Mitigation Guidance (2026-11-02) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to disable or restrict JavaScript execution for untrusted web content in client environments: upgrade to Firefox 159, Thunderbird 159, which resolves the use-after-free condition during memory management in the SpiderMonkey JavaScript garbage collection component, closing crafted JavaScript execution triggering garbage collection. Until patched, this is a concern on Clients executing untrusted web content in script-enabled browser contexts across all platforms, so Restrict or disable JavaScript execution in client environments and prevent navigation to untrusted web content. As a compensating measure, Enable Address Space Layout Randomization to randomize process memory targets and impede reliable exploitation. These controls limit blast radius and contain exploitation, but they do not fix the underlying use-after-free defect \u2014 apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-1309 Script Engine Restriction (Sandbox / Disable) (high)",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the JavaScript: GC component"
},
{
"cve": "CVE-2026-118019",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-10-27T18:23:05.777613+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2562259"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nRace condition, use-after-free in the DOM: File component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Race condition, use-after-free in the DOM: File component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-118019"
},
{
"category": "external",
"summary": "RHBZ#2562259",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562259"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-118019",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118019"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-118019",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118019"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-118/#CVE-2026-118019",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-118/#CVE-2026-118019"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-121/#CVE-2026-118019",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-121/#CVE-2026-118019"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-118019",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-118019"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-118019",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-118019"
}
],
"release_date": "2026-10-27T14:06:03.344000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Race condition, use-after-free in the DOM: File component"
},
{
"cve": "CVE-2026-118021",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-10-27T15:11:11.015788+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2562042"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSandbox escape due to use-after-free in the XPCOM component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Sandbox escape due to use-after-free in the XPCOM component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-118021"
},
{
"category": "external",
"summary": "RHBZ#2562042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562042"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-118021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118021"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-118021",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118021"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-118/#CVE-2026-118021",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-118/#CVE-2026-118021"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-121/#CVE-2026-118021",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-121/#CVE-2026-118021"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-118021",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-118021"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-118021",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-118021"
}
],
"release_date": "2026-10-27T14:06:04.037000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Sandbox escape due to use-after-free in the XPCOM component"
},
{
"cve": "CVE-2026-118024",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-10-27T17:48:35.926081+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2562122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Graphics: Text component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Graphics: Text component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-118024"
},
{
"category": "external",
"summary": "RHBZ#2562122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-118024",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118024"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-118024",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118024"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-118/#CVE-2026-118024",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-118/#CVE-2026-118024"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-121/#CVE-2026-118024",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-121/#CVE-2026-118024"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-118024",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-118024"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-118024",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-118024"
}
],
"release_date": "2026-10-27T14:06:05.145000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Use-after-free in the Graphics: Text component"
},
{
"cve": "CVE-2026-124853",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-11-10T19:30:27.008876+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570012"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSandbox escape due to incorrect boundary conditions in the Graphics: Text component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124853"
},
{
"category": "external",
"summary": "RHBZ#2570012",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570012"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124853",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124853"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124853",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124853"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124853",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124853"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124853",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124853"
}
],
"release_date": "2026-11-10T13:28:04.003000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component"
},
{
"cve": "CVE-2026-124854",
"cwe": {
"id": "CWE-270",
"name": "Privilege Context Switching Error"
},
"discovery_date": "2026-11-10T19:23:03.541423+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2569907"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nPrivilege escalation in the DOM: Navigation component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Privilege escalation in the DOM: Navigation component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124854"
},
{
"category": "external",
"summary": "RHBZ#2569907",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569907"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124854",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124854"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124854",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124854"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124854",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124854"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124854",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124854"
}
],
"release_date": "2026-11-10T13:28:04.635000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Privilege escalation in the DOM: Navigation component"
},
{
"cve": "CVE-2026-124855",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-11-10T19:28:36.677764+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2569985"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSandbox escape in the DOM: Navigation component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Sandbox escape in the DOM: Navigation component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124855"
},
{
"category": "external",
"summary": "RHBZ#2569985",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569985"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124855",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124855"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124855",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124855"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124855",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124855"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124855",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124855"
}
],
"release_date": "2026-11-10T13:28:05.206000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Sandbox escape in the DOM: Navigation component"
},
{
"cve": "CVE-2026-124856",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-11-10T19:56:35.523328+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570417"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nIncorrect boundary conditions in the Networking: HTTP component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Incorrect boundary conditions in the Networking: HTTP component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124856"
},
{
"category": "external",
"summary": "RHBZ#2570417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124856",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124856"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124856",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124856"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124856",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124856"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124856",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124856"
}
],
"release_date": "2026-11-10T13:28:05.792000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Incorrect boundary conditions in the Networking: HTTP component"
},
{
"cve": "CVE-2026-124857",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:28:10.702135+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2569978"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Graphics: Canvas2D component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124857"
},
{
"category": "external",
"summary": "RHBZ#2569978",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569978"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124857",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124857"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124857",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124857"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124857",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124857"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124857",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124857"
}
],
"release_date": "2026-11-10T13:28:06.359000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component"
},
{
"cve": "CVE-2026-124858",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:13:39.793091+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570662"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the DOM: HTML Parser component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the DOM: HTML Parser component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124858"
},
{
"category": "external",
"summary": "RHBZ#2570662",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570662"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124858"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124858",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124858"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124858",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124858"
}
],
"release_date": "2026-11-10T13:28:06.892000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the DOM: HTML Parser component"
},
{
"cve": "CVE-2026-124859",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-11-10T19:35:58.290277+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570100"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSandbox escape due to incorrect boundary conditions in the Storage: Cache API component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124859"
},
{
"category": "external",
"summary": "RHBZ#2570100",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570100"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124859",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124859"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124859",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124859"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124859",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124859"
}
],
"release_date": "2026-11-10T13:28:07.496000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component"
},
{
"cve": "CVE-2026-124860",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:16:58.647706+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2569830"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Audio/Video component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Audio/Video component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124860"
},
{
"category": "external",
"summary": "RHBZ#2569830",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569830"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124860"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124860",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124860"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124860",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124860"
}
],
"release_date": "2026-11-10T13:28:08.073000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the Audio/Video component"
},
{
"cve": "CVE-2026-124861",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:42:35.036764+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2571152"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSandbox escape due to use-after-free in the Audio/Video: cubeb component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Sandbox escape due to use-after-free in the Audio/Video: cubeb component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124861"
},
{
"category": "external",
"summary": "RHBZ#2571152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571152"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124861",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124861"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124861",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124861"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124861",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124861"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124861",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124861"
}
],
"release_date": "2026-11-10T13:28:08.621000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Sandbox escape due to use-after-free in the Audio/Video: cubeb component"
},
{
"cve": "CVE-2026-124862",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:36:57.933842+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570116"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the DOM: Core \u0026 HTML component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124862"
},
{
"category": "external",
"summary": "RHBZ#2570116",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570116"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124862",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124862"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124862",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124862"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124862",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124862"
}
],
"release_date": "2026-11-10T13:28:09.196000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
},
{
"category": "workaround",
"details": "Avoid navigating to untrusted websites in Firefox and exercise caution with untrusted HTML emails or unsolicited attachments in Thunderbird. Where application usage is required, isolate browser and mail sessions within a sandboxed environment (such as an unprivileged container or Flatpak sandbox) to constrain potential access to host resources.\n\nIf graphical web browsing or email processing is not required on the system, remove the affected packages:\n\n```\ndnf remove firefox thunderbird\n```\n\nCaveat: On graphical desktop installations, removing these packages may remove dependent desktop components or alter desktop environment functionality. Headless or terminal-based server environments will remain unaffected.",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component"
},
{
"cve": "CVE-2026-124863",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:35:48.802886+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2571008"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the DOM: HTML Parser component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the DOM: HTML Parser component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124863"
},
{
"category": "external",
"summary": "RHBZ#2571008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124863",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124863"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124863",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124863"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124863",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124863"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124863",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124863"
}
],
"release_date": "2026-11-10T13:28:09.739000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the DOM: HTML Parser component"
},
{
"cve": "CVE-2026-124864",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:40:12.312430+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2571102"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSandbox escape due to use-after-free in the DOM: Service Workers component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Service Workers component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124864"
},
{
"category": "external",
"summary": "RHBZ#2571102",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571102"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124864",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124864"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124864",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124864"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124864",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124864"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124864",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124864"
}
],
"release_date": "2026-11-10T13:28:10.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Service Workers component"
},
{
"cve": "CVE-2026-124865",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:45:29.381250+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570248"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Audio/Video component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Audio/Video component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124865"
},
{
"category": "external",
"summary": "RHBZ#2570248",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570248"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124865",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124865"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124865",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124865"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124865",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124865"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124865",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124865"
}
],
"release_date": "2026-11-10T13:28:10.923000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the Audio/Video component"
},
{
"cve": "CVE-2026-124866",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:05:52.591503+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570548"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Layout component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Layout component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124866"
},
{
"category": "external",
"summary": "RHBZ#2570548",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570548"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124866",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124866"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124866",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124866"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124866",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124866"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124866",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124866"
}
],
"release_date": "2026-11-10T13:28:11.475000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the Layout component"
},
{
"cve": "CVE-2026-124868",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2026-11-10T20:20:40.940300+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570770"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nIncorrect boundary conditions in the DOM: Core \u0026 HTML component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Incorrect boundary conditions in the DOM: Core \u0026 HTML component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124868"
},
{
"category": "external",
"summary": "RHBZ#2570770",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570770"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124868",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124868"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124868",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124868"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124868",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124868"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124868",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124868"
}
],
"release_date": "2026-11-10T13:28:12.066000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Incorrect boundary conditions in the DOM: Core \u0026 HTML component"
},
{
"cve": "CVE-2026-124869",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:20:54.543125+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2569877"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the DOM: Core \u0026 HTML component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124869"
},
{
"category": "external",
"summary": "RHBZ#2569877",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569877"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124869"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124869",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124869"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124869",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124869"
}
],
"release_date": "2026-11-10T13:28:12.645000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component"
},
{
"cve": "CVE-2026-124870",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2026-11-10T20:09:21.887878+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570601"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nIncorrect boundary conditions in the JavaScript: GC component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124870"
},
{
"category": "external",
"summary": "RHBZ#2570601",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570601"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124870"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124870",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124870"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124870",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124870"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124870",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124870"
}
],
"release_date": "2026-11-10T13:28:13.213000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component"
},
{
"cve": "CVE-2026-124872",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:40:17.505299+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2571104"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Cycle Collector component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Cycle Collector component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124872"
},
{
"category": "external",
"summary": "RHBZ#2571104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124872",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124872"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124872",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124872"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124872",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124872"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124872",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124872"
}
],
"release_date": "2026-11-10T13:28:13.881000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the Cycle Collector component"
},
{
"cve": "CVE-2026-124873",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:15:11.121879+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570686"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInvalid pointer in the DOM: Editor component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Invalid pointer in the DOM: Editor component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124873"
},
{
"category": "external",
"summary": "RHBZ#2570686",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570686"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124873",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124873"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124873",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124873"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124873",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124873"
}
],
"release_date": "2026-11-10T13:28:14.454000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Invalid pointer in the DOM: Editor component"
},
{
"cve": "CVE-2026-124874",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-11-10T20:16:22.728793+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570705"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSame-origin policy bypass in the Networking: HTTP component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Same-origin policy bypass in the Networking: HTTP component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124874"
},
{
"category": "external",
"summary": "RHBZ#2570705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570705"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124874"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124874",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124874"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124874",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124874"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124874",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124874"
}
],
"release_date": "2026-11-10T13:28:15.047000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Same-origin policy bypass in the Networking: HTTP component"
},
{
"cve": "CVE-2026-124875",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-11-10T19:51:17.884782+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570334"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nIncorrect boundary conditions in the DOM: CSS Object Model component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Incorrect boundary conditions in the DOM: CSS Object Model component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124875"
},
{
"category": "external",
"summary": "RHBZ#2570334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570334"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124875",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124875"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124875",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124875"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124875",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124875"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124875",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124875"
}
],
"release_date": "2026-11-10T13:28:15.627000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Incorrect boundary conditions in the DOM: CSS Object Model component"
},
{
"cve": "CVE-2026-124876",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:38:28.717399+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570140"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the CSS Parsing and Computation component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124876"
},
{
"category": "external",
"summary": "RHBZ#2570140",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570140"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124876",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124876"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124876",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124876"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124876",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124876"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124876",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124876"
}
],
"release_date": "2026-11-10T13:28:16.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component"
},
{
"cve": "CVE-2026-124877",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:26:31.082537+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2569955"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Layout: Positioned component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Layout: Positioned component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124877"
},
{
"category": "external",
"summary": "RHBZ#2569955",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569955"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124877",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124877"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124877",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124877"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124877",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124877"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124877",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124877"
}
],
"release_date": "2026-11-10T13:28:16.790000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the Layout: Positioned component"
},
{
"cve": "CVE-2026-124879",
"cwe": {
"id": "CWE-763",
"name": "Release of Invalid Pointer or Reference"
},
"discovery_date": "2026-11-10T20:27:04.558571+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570865"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInvalid pointer in the Networking: Cache component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Invalid pointer in the Networking: Cache component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124879"
},
{
"category": "external",
"summary": "RHBZ#2570865",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570865"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124879",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124879"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124879",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124879"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124879",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124879"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124879",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124879"
}
],
"release_date": "2026-11-10T13:28:17.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Invalid pointer in the Networking: Cache component"
},
{
"cve": "CVE-2026-124880",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:40:43.072142+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2571112"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the DOM: Core \u0026 HTML component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124880"
},
{
"category": "external",
"summary": "RHBZ#2571112",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571112"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124880",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124880"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124880",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124880"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124880",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124880"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124880",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124880"
}
],
"release_date": "2026-11-10T13:28:17.844000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component"
},
{
"cve": "CVE-2026-124881",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:36:24.676122+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570107"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the CSS Parsing and Computation component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124881"
},
{
"category": "external",
"summary": "RHBZ#2570107",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570107"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124881",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124881"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124881",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124881"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124881",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124881"
}
],
"release_date": "2026-11-10T13:28:18.401000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component"
},
{
"cve": "CVE-2026-124882",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:37:36.974258+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570127"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the CSS Parsing and Computation component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124882"
},
{
"category": "external",
"summary": "RHBZ#2570127",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570127"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124882",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124882"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124882",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124882"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124882",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124882"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124882",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124882"
}
],
"release_date": "2026-11-10T13:28:19.014000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component"
},
{
"cve": "CVE-2026-124883",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:07:36.963264+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570574"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the DOM: Core \u0026 HTML component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124883"
},
{
"category": "external",
"summary": "RHBZ#2570574",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570574"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124883",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124883"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124883",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124883"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124883",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124883"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124883",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124883"
}
],
"release_date": "2026-11-10T13:28:19.635000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component"
},
{
"cve": "CVE-2026-124884",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:19:29.648543+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570755"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the JavaScript: GC component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the JavaScript: GC component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124884"
},
{
"category": "external",
"summary": "RHBZ#2570755",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570755"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124884",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124884"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124884",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124884"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124884",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124884"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124884",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124884"
}
],
"release_date": "2026-11-10T13:28:20.223000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the JavaScript: GC component"
},
{
"cve": "CVE-2026-124885",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:01:46.829355+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570491"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Graphics: Text component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Graphics: Text component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124885"
},
{
"category": "external",
"summary": "RHBZ#2570491",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570491"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124885",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124885"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124885",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124885"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124885",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124885"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124885",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124885"
}
],
"release_date": "2026-11-10T13:28:20.772000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the Graphics: Text component"
},
{
"cve": "CVE-2026-124886",
"cwe": {
"id": "CWE-763",
"name": "Release of Invalid Pointer or Reference"
},
"discovery_date": "2026-11-10T20:13:33.065094+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570660"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInvalid pointer in the Layout: Text and Fonts component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124886"
},
{
"category": "external",
"summary": "RHBZ#2570660",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570660"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124886",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124886"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124886",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124886"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124886",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124886"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124886",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124886"
}
],
"release_date": "2026-11-10T13:28:21.339000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component"
},
{
"cve": "CVE-2026-124887",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2026-11-10T19:40:37.044530+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570172"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nIncorrect boundary conditions in the Layout: Text and Fonts component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124887"
},
{
"category": "external",
"summary": "RHBZ#2570172",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570172"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124887",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124887"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124887",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124887"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124887",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124887"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124887",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124887"
}
],
"release_date": "2026-11-10T13:28:21.877000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component"
},
{
"cve": "CVE-2026-124888",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-11-10T20:41:19.490350+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2571126"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nIncorrect boundary conditions in the Layout: Text and Fonts component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124888"
},
{
"category": "external",
"summary": "RHBZ#2571126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571126"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124888",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124888"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124888",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124888"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124888",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124888"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124888",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124888"
}
],
"release_date": "2026-11-10T13:28:22.489000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component"
},
{
"cve": "CVE-2026-124889",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:36:57.322510+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2571031"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the CSS Parsing and Computation component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124889"
},
{
"category": "external",
"summary": "RHBZ#2571031",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571031"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124889",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124889"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124889",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124889"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124889",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124889"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124889",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124889"
}
],
"release_date": "2026-11-10T13:28:23.088000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component"
},
{
"cve": "CVE-2026-124890",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:12:33.530048+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570644"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the DOM: Core \u0026 HTML component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124890"
},
{
"category": "external",
"summary": "RHBZ#2570644",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570644"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124890",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124890"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124890",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124890"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124890",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124890"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124890",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124890"
}
],
"release_date": "2026-11-10T13:28:23.677000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component"
},
{
"cve": "CVE-2026-124891",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2026-11-10T19:27:37.203731+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2569970"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nIncorrect boundary conditions in the DOM: Selection component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Incorrect boundary conditions in the DOM: Selection component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124891"
},
{
"category": "external",
"summary": "RHBZ#2569970",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569970"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124891",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124891"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124891",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124891"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124891",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124891"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124891",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124891"
}
],
"release_date": "2026-11-10T13:28:24.228000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Incorrect boundary conditions in the DOM: Selection component"
},
{
"cve": "CVE-2026-124892",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:17:06.722347+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570717"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the JavaScript: GC component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the JavaScript: GC component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124892"
},
{
"category": "external",
"summary": "RHBZ#2570717",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570717"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124892",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124892"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124892",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124892"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124892",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124892"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124892",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124892"
}
],
"release_date": "2026-11-10T13:28:24.734000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the JavaScript: GC component"
},
{
"cve": "CVE-2026-124893",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:39:05.846039+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570149"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the DOM: Workers component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the DOM: Workers component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124893"
},
{
"category": "external",
"summary": "RHBZ#2570149",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570149"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124893",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124893"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124893",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124893"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124893",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124893"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124893",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124893"
}
],
"release_date": "2026-11-10T13:28:25.302000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the DOM: Workers component"
},
{
"cve": "CVE-2026-124894",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:57:36.558924+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570433"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Networking: Cookies component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Networking: Cookies component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124894"
},
{
"category": "external",
"summary": "RHBZ#2570433",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570433"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124894",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124894"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124894",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124894"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124894",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124894"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124894",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124894"
}
],
"release_date": "2026-11-10T13:28:25.816000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the Networking: Cookies component"
},
{
"cve": "CVE-2026-124895",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:58:02.801823+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570440"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Storage: localStorage \u0026 sessionStorage component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Storage: localStorage \u0026 sessionStorage component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124895"
},
{
"category": "external",
"summary": "RHBZ#2570440",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570440"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124895"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124895",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124895"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124895",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124895"
}
],
"release_date": "2026-11-10T13:28:26.386000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the Storage: localStorage \u0026 sessionStorage component"
},
{
"cve": "CVE-2026-124896",
"cwe": {
"id": "CWE-763",
"name": "Release of Invalid Pointer or Reference"
},
"discovery_date": "2026-11-10T20:40:56.410667+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2571117"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInvalid pointer in the Layout: Text and Fonts component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124896"
},
{
"category": "external",
"summary": "RHBZ#2571117",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571117"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124896"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124896",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124896"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124896",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124896"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124896",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124896"
}
],
"release_date": "2026-11-10T13:28:26.959000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component"
},
{
"cve": "CVE-2026-124897",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:39:03.131498+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2571076"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the JavaScript: GC component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the JavaScript: GC component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124897"
},
{
"category": "external",
"summary": "RHBZ#2571076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124897",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124897"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124897",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124897"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124897",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124897"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124897",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124897"
}
],
"release_date": "2026-11-10T13:28:27.543000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the JavaScript: GC component"
},
{
"cve": "CVE-2026-124898",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:42:51.611933+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2571158"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the DOM: Editor component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the DOM: Editor component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124898"
},
{
"category": "external",
"summary": "RHBZ#2571158",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571158"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124898",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124898"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124898",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124898"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124898",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124898"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124898",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124898"
}
],
"release_date": "2026-11-10T13:28:28.117000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the DOM: Editor component"
},
{
"cve": "CVE-2026-124899",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:03:31.867867+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570514"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Layout: Text and Fonts component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124899"
},
{
"category": "external",
"summary": "RHBZ#2570514",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570514"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124899",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124899"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124899",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124899"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124899",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124899"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124899",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124899"
}
],
"release_date": "2026-11-10T13:28:28.720000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component"
},
{
"cve": "CVE-2026-124901",
"cwe": {
"id": "CWE-939",
"name": "Improper Authorization in Handler for Custom URL Scheme"
},
"discovery_date": "2026-11-10T20:41:16.758219+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2571125"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nOther issue in the Networking: JAR component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Other issue in the Networking: JAR component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124901"
},
{
"category": "external",
"summary": "RHBZ#2571125",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571125"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124901",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124901"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124901",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124901"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124901",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124901"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124901",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124901"
}
],
"release_date": "2026-11-10T13:28:29.415000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Other issue in the Networking: JAR component"
},
{
"cve": "CVE-2026-124902",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-11-10T20:24:26.565372+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570824"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSame-origin policy bypass due to race condition in the Audio/Video component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Same-origin policy bypass due to race condition in the Audio/Video component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124902"
},
{
"category": "external",
"summary": "RHBZ#2570824",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570824"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124902",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124902"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124902",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124902"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124902",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124902"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124902",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124902"
}
],
"release_date": "2026-11-10T13:28:29.981000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Same-origin policy bypass due to race condition in the Audio/Video component"
},
{
"cve": "CVE-2026-124903",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:53:26.212029+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570365"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSandbox escape due to use-after-free in the IPC component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Sandbox escape due to use-after-free in the IPC component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124903"
},
{
"category": "external",
"summary": "RHBZ#2570365",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570365"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124903",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124903"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124903",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124903"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124903",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124903"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124903",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124903"
}
],
"release_date": "2026-11-10T13:28:30.734000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Sandbox escape due to use-after-free in the IPC component"
},
{
"cve": "CVE-2026-124905",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-11-10T19:30:35.026240+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570014"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSandbox escape in the DOM: Navigation component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Sandbox escape in the DOM: Navigation component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124905"
},
{
"category": "external",
"summary": "RHBZ#2570014",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570014"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124905",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124905"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124905",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124905"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124905",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124905"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124905",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124905"
}
],
"release_date": "2026-11-10T13:28:31.309000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Sandbox escape in the DOM: Navigation component"
},
{
"cve": "CVE-2026-124906",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:40:09.199225+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570165"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Graphics: WebRender component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Graphics: WebRender component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124906"
},
{
"category": "external",
"summary": "RHBZ#2570165",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570165"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124906",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124906"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124906",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124906"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124906",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124906"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124906",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124906"
}
],
"release_date": "2026-11-10T13:28:31.835000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the Graphics: WebRender component"
},
{
"cve": "CVE-2026-124907",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:13:47.962032+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570664"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nPrivilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124907"
},
{
"category": "external",
"summary": "RHBZ#2570664",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570664"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124907",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124907"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124907",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124907"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124907",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124907"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124907",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124907"
}
],
"release_date": "2026-11-10T13:28:32.472000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component"
},
{
"cve": "CVE-2026-124909",
"cwe": {
"id": "CWE-359",
"name": "Exposure of Private Personal Information to an Unauthorized Actor"
},
"discovery_date": "2026-11-10T19:38:16.866267+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570137"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInformation disclosure in the Private Browsing component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Information disclosure in the Private Browsing component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124909"
},
{
"category": "external",
"summary": "RHBZ#2570137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570137"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124909",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124909"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124909",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124909"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124909",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124909"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124909",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124909"
}
],
"release_date": "2026-11-10T13:28:32.985000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Information disclosure in the Private Browsing component"
},
{
"cve": "CVE-2026-124910",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-11-10T19:42:53.585146+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570208"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nMitigation bypass in the WebExtensions component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Mitigation bypass in the WebExtensions component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124910"
},
{
"category": "external",
"summary": "RHBZ#2570208",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570208"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124910",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124910"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124910",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124910"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124910",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124910"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124910",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124910"
}
],
"release_date": "2026-11-10T13:28:33.570000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Mitigation bypass in the WebExtensions component"
},
{
"cve": "CVE-2026-124912",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-11-10T20:16:19.523272+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570704"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSpoofing issue in the DOM: Security component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Spoofing issue in the DOM: Security component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124912"
},
{
"category": "external",
"summary": "RHBZ#2570704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570704"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124912",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124912"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124912",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124912"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124912",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124912"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124912",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124912"
}
],
"release_date": "2026-11-10T13:28:34.180000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Spoofing issue in the DOM: Security component"
},
{
"cve": "CVE-2026-124913",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-11-10T20:37:58.878937+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2571052"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSite isolation issue in the Networking component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Site isolation issue in the Networking component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124913"
},
{
"category": "external",
"summary": "RHBZ#2571052",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571052"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124913",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124913"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124913",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124913"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124913",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124913"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124913",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124913"
}
],
"release_date": "2026-11-10T13:28:34.822000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Site isolation issue in the Networking component"
},
{
"cve": "CVE-2026-124914",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-11-10T19:18:20.507616+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2569846"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSite isolation issue in the DOM: Navigation component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Site isolation issue in the DOM: Navigation component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124914"
},
{
"category": "external",
"summary": "RHBZ#2569846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569846"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124914",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124914"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124914",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124914"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124914",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124914"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124914",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124914"
}
],
"release_date": "2026-11-10T13:28:35.366000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Site isolation issue in the DOM: Navigation component"
},
{
"cve": "CVE-2026-124915",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-11-10T20:12:05.534333+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570636"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nIncorrect boundary conditions in the Graphics: WebGPU component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebGPU component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124915"
},
{
"category": "external",
"summary": "RHBZ#2570636",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570636"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124915",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124915"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124915",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124915"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124915",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124915"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124915",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124915"
}
],
"release_date": "2026-11-10T13:28:35.889000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebGPU component"
},
{
"cve": "CVE-2026-124917",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:26:40.098438+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2569957"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSandbox escape due to use-after-free in the Widget: Gtk component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124917"
},
{
"category": "external",
"summary": "RHBZ#2569957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569957"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124917",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124917"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124917",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124917"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124917",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124917"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124917",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124917"
}
],
"release_date": "2026-11-10T13:28:36.582000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component"
},
{
"cve": "CVE-2026-124918",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-11-10T20:19:22.971588+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570753"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nPrivilege escalation due to incorrect boundary conditions in the Graphics: WebRender component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124918"
},
{
"category": "external",
"summary": "RHBZ#2570753",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570753"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124918",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124918"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124918",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124918"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124918",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124918"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124918",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124918"
}
],
"release_date": "2026-11-10T13:28:37.154000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component"
},
{
"cve": "CVE-2026-124919",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:21:53.344044+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570787"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nPrivilege escalation due to use-after-free in the WebRTC: Networking component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Privilege escalation due to use-after-free in the WebRTC: Networking component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124919"
},
{
"category": "external",
"summary": "RHBZ#2570787",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570787"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124919",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124919"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124919",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124919"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124919",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124919"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124919",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124919"
}
],
"release_date": "2026-11-10T13:28:37.787000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Privilege escalation due to use-after-free in the WebRTC: Networking component"
},
{
"cve": "CVE-2026-124922",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:18:33.536586+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the CSS Transitions and Animations component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the CSS Transitions and Animations component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124922"
},
{
"category": "external",
"summary": "RHBZ#2570740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124922"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124922",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124922"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124922",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124922"
}
],
"release_date": "2026-11-10T13:28:38.427000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Use-after-free in the CSS Transitions and Animations component"
},
{
"cve": "CVE-2026-124924",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-11-10T20:23:30.768622+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570811"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nIncorrect boundary conditions in the Graphics: WebRender component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebRender component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124924"
},
{
"category": "external",
"summary": "RHBZ#2570811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570811"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124924",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124924"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124924",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124924"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124924",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124924"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124924",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124924"
}
],
"release_date": "2026-11-10T13:28:39.765000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebRender component"
},
{
"cve": "CVE-2026-124926",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-11-10T20:32:34.513778+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570955"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nIncorrect boundary conditions in the WebRTC component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Incorrect boundary conditions in the WebRTC component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124926"
},
{
"category": "external",
"summary": "RHBZ#2570955",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570955"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124926"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124926",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124926"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124926",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124926"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124926",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124926"
}
],
"release_date": "2026-11-10T13:28:40.305000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Incorrect boundary conditions in the WebRTC component"
},
{
"cve": "CVE-2026-124927",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-11-10T20:11:37.748134+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570629"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSite isolation issue in the Graphics: WebRender component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Site isolation issue in the Graphics: WebRender component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124927"
},
{
"category": "external",
"summary": "RHBZ#2570629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124927",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124927"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124927",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124927"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124927",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124927"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124927",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124927"
}
],
"release_date": "2026-11-10T13:28:40.849000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Site isolation issue in the Graphics: WebRender component"
},
{
"cve": "CVE-2026-124929",
"cwe": {
"id": "CWE-359",
"name": "Exposure of Private Personal Information to an Unauthorized Actor"
},
"discovery_date": "2026-11-10T20:08:26.472813+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570589"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInformation disclosure in the Layout: Form Controls component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Information disclosure in the Layout: Form Controls component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124929"
},
{
"category": "external",
"summary": "RHBZ#2570589",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570589"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124929",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124929"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124929",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124929"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124929",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124929"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124929",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124929"
}
],
"release_date": "2026-11-10T13:28:41.395000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Information disclosure in the Layout: Form Controls component"
},
{
"cve": "CVE-2026-124930",
"cwe": {
"id": "CWE-359",
"name": "Exposure of Private Personal Information to an Unauthorized Actor"
},
"discovery_date": "2026-11-10T20:13:15.398126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570655"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInformation disclosure in the Address Bar component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Information disclosure in the Address Bar component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124930"
},
{
"category": "external",
"summary": "RHBZ#2570655",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570655"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124930",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124930"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124930",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124930"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124930",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124930"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124930",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124930"
}
],
"release_date": "2026-11-10T13:28:41.992000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Information disclosure in the Address Bar component"
},
{
"cve": "CVE-2026-124931",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-11-10T20:31:46.087407+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSame-origin policy bypass in the DOM: Core \u0026 HTML component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Same-origin policy bypass in the DOM: Core \u0026 HTML component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124931"
},
{
"category": "external",
"summary": "RHBZ#2570942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124931",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124931"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124931",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124931"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124931",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124931"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124931",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124931"
}
],
"release_date": "2026-11-10T13:28:42.585000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Same-origin policy bypass in the DOM: Core \u0026 HTML component"
},
{
"cve": "CVE-2026-124932",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T20:27:49.709901+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570876"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Graphics component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Graphics component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124932"
},
{
"category": "external",
"summary": "RHBZ#2570876",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570876"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124932",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124932"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124932",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124932"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124932",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124932"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124932",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124932"
}
],
"release_date": "2026-11-10T13:28:43.270000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Use-after-free in the Graphics component"
},
{
"cve": "CVE-2026-124933",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-11-10T20:04:05.380732+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570521"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSandbox escape in the Console component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Sandbox escape in the Console component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124933"
},
{
"category": "external",
"summary": "RHBZ#2570521",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570521"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124933",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124933"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124933",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124933"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124933",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124933"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124933",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124933"
}
],
"release_date": "2026-11-10T13:28:43.919000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Sandbox escape in the Console component"
},
{
"cve": "CVE-2026-124934",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2026-11-10T19:29:12.438422+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2569994"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSpoofing issue in the Security component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Spoofing issue in the Security component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124934"
},
{
"category": "external",
"summary": "RHBZ#2569994",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569994"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124934",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124934"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124934",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124934"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124934",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124934"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124934",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124934"
}
],
"release_date": "2026-11-10T13:28:44.472000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "firefox: thunderbird: Spoofing issue in the Security component"
},
{
"cve": "CVE-2026-124935",
"cwe": {
"id": "CWE-475",
"name": "Undefined Behavior for Input to API"
},
"discovery_date": "2026-11-10T19:49:30.574083+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570306"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUndefined behavior in the WebRTC: Networking component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Undefined behavior in the WebRTC: Networking component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124935"
},
{
"category": "external",
"summary": "RHBZ#2570306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570306"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124935",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124935"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124935",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124935"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124935",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124935"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124935",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124935"
}
],
"release_date": "2026-11-10T13:28:45.091000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "firefox: thunderbird: Undefined behavior in the WebRTC: Networking component"
},
{
"cve": "CVE-2026-124938",
"cwe": {
"id": "CWE-497",
"name": "Exposure of Sensitive System Information to an Unauthorized Control Sphere"
},
"discovery_date": "2026-11-10T20:42:16.770940+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2571146"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nMitigation bypass in the Add-ons Manager component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Mitigation bypass in the Add-ons Manager component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124938"
},
{
"category": "external",
"summary": "RHBZ#2571146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124938",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124938"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124938",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124938"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124938",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124938"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124938",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124938"
}
],
"release_date": "2026-11-10T13:28:45.588000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "firefox: thunderbird: Mitigation bypass in the Add-ons Manager component"
},
{
"cve": "CVE-2026-124939",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type"
},
"discovery_date": "2026-11-10T20:43:05.503739+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2571162"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nJIT miscompilation in the JavaScript Engine: JIT component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124939"
},
{
"category": "external",
"summary": "RHBZ#2571162",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571162"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124939"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124939",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124939"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124939",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124939"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124939",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124939"
}
],
"release_date": "2026-11-10T13:28:46.139000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component"
},
{
"cve": "CVE-2026-124940",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-11-10T20:28:54.556399+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570896"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nMitigation bypass in the File Handling component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Mitigation bypass in the File Handling component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124940"
},
{
"category": "external",
"summary": "RHBZ#2570896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570896"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124940"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124940",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124940"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124940",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124940"
}
],
"release_date": "2026-11-10T13:28:46.729000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "firefox: thunderbird: Mitigation bypass in the File Handling component"
},
{
"cve": "CVE-2026-124941",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-11-10T19:28:25.734944+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2569982"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInformation disclosure in the Security: RLBox component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Information disclosure in the Security: RLBox component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124941"
},
{
"category": "external",
"summary": "RHBZ#2569982",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569982"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124941"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124941",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124941"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124941",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124941"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124941",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124941"
}
],
"release_date": "2026-11-10T13:28:47.308000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "firefox: thunderbird: Information disclosure in the Security: RLBox component"
},
{
"cve": "CVE-2026-124942",
"cwe": {
"id": "CWE-763",
"name": "Release of Invalid Pointer or Reference"
},
"discovery_date": "2026-11-10T20:17:38.611253+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570726"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInvalid pointer in the DOM: Streams component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Invalid pointer in the DOM: Streams component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124942"
},
{
"category": "external",
"summary": "RHBZ#2570726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124942"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124942",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124942"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124942",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124942"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124942",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124942"
}
],
"release_date": "2026-11-10T13:28:47.796000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "firefox: thunderbird: Invalid pointer in the DOM: Streams component"
},
{
"cve": "CVE-2026-124948",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-11-10T19:45:54.916662+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570255"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nIncorrect boundary conditions, use-after-free in the Graphics component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Incorrect boundary conditions, use-after-free in the Graphics component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124948"
},
{
"category": "external",
"summary": "RHBZ#2570255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124948",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124948"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124948",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124948"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124948",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124948"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124948",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124948"
}
],
"release_date": "2026-11-10T13:28:48.375000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "firefox: thunderbird: Incorrect boundary conditions, use-after-free in the Graphics component"
},
{
"cve": "CVE-2026-124951",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-11-10T19:44:56.360824+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2570241"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nPrivilege escalation in the Nimbus Desktop Client component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Privilege escalation in the Nimbus Desktop Client component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-124951"
},
{
"category": "external",
"summary": "RHBZ#2570241",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570241"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-124951",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124951"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-124951",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124951"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124951",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-127/#CVE-2026-124951"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124951",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-129/#CVE-2026-124951"
}
],
"release_date": "2026-11-10T13:28:48.946000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T10:16:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99572"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.src",
"AppStream-10.3.Z:firefox-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debuginfo-0:153.7.0-1.el10_3.x86_64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.aarch64",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.ppc64le",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.s390x",
"AppStream-10.3.Z:firefox-debugsource-0:153.7.0-1.el10_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "firefox: thunderbird: Privilege escalation in the Nimbus Desktop Client component"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.