CVE-2026-124893Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the DOM: Workers component
CVE-2026-124892Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the JavaScript: GC component
CVE-2026-124891Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the DOM: Selection component
CVE-2026-124890Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
CVE-2026-124889Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component
CVE-2026-124888Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component
CVE-2026-124887Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component
CVE-2026-124886Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component
CVE-2026-124885Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Graphics: Text component
CVE-2026-124884Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the JavaScript: GC component
CVE-2026-124883Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
CVE-2026-124882Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component
CVE-2026-124881Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component
CVE-2026-124880Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
CVE-2026-124879Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Invalid pointer in the Networking: Cache component
CVE-2026-124877Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Layout: Positioned component
CVE-2026-124876Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component
CVE-2026-124875Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the DOM: CSS Object Model component
CVE-2026-124874Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Same-origin policy bypass in the Networking: HTTP component
CVE-2026-124873Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Invalid pointer in the DOM: Editor component
CVE-2026-124872Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Cycle Collector component
CVE-2026-124870Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component
CVE-2026-124869Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
CVE-2026-124868Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the DOM: Core & HTML component
CVE-2026-124866Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Layout component
CVE-2026-124865Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Audio/Video component
CVE-2026-124864Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Service Workers component
CVE-2026-124863Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component
CVE-2026-124862Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
CVE-2026-124861Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.