CVE-2026-124933Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Sandbox escape in the Console component
CVE-2026-124932Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Graphics component
CVE-2026-124931Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Same-origin policy bypass in the DOM: Core & HTML component
CVE-2026-124930Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Information disclosure in the Address Bar component
CVE-2026-124929Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Information disclosure in the Layout: Form Controls component
CVE-2026-124927Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component
CVE-2026-124926Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the WebRTC component
CVE-2026-124924Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebRender component
CVE-2026-124922Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the CSS Transitions and Animations component
CVE-2026-124919Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124918Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124917Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124915Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebGPU component
CVE-2026-124914Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Site isolation issue in the DOM: Navigation component
CVE-2026-124913Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Site isolation issue in the Networking component
CVE-2026-124912Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Spoofing issue in the DOM: Security component
CVE-2026-124910Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Mitigation bypass in the WebExtensions component
CVE-2026-124909Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Information disclosure in the Private Browsing component
CVE-2026-124907Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124906Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Graphics: WebRender component
CVE-2026-124905Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Sandbox escape in the DOM: Navigation component
CVE-2026-124903Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Sandbox escape due to use-after-free in the IPC component
CVE-2026-124902Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Same-origin policy bypass due to race condition in the Audio/Video component
CVE-2026-124901Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Other issue in the Networking: JAR component
CVE-2026-124899Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component
CVE-2026-124898Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the DOM: Editor component
CVE-2026-124897Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the JavaScript: GC component
CVE-2026-124896Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component
CVE-2026-124895Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Storage: localStorage & sessionStorage component
CVE-2026-124894Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Networking: Cookies component