RHSA-2026:24718HighCVSS 8.8

Red Hat Security Advisory: thunderbird security update

Published
June 9, 2026
Last Modified
July 28, 2026

🔗 CVE IDs covered (5)

CVE-2026-7321 →CVE-2026-7322 →CVE-2026-7323 →CVE-2026-8091 →CVE-2026-7320 →

📋 Description

CVE-2026-7320 — firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component CVE-2026-7321 — firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component CVE-2026-7322 — firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 CVE-2026-7323 — firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 CVE-2026-8091 — firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component

🎯 Affected products10

  • Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)
  • thunderbird-0:140.10.1-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • thunderbird-0:140.10.1-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)
  • thunderbird-0:140.10.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • thunderbird-0:140.10.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)
  • thunderbird-debuginfo-0:140.10.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • thunderbird-debuginfo-0:140.10.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)
  • thunderbird-debugsource-0:140.10.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • thunderbird-debugsource-0:140.10.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (7)