CVE-2026-124951Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
Privilege escalation in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124948Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions, use-after-free in the Graphics component
CVE-2026-124942Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Invalid pointer in the DOM: Streams component
CVE-2026-124941Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Information disclosure in the Security: RLBox component
CVE-2026-124940Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Mitigation bypass in the File Handling component
CVE-2026-124939Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component
CVE-2026-124938Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Mitigation bypass in the Add-ons Manager component
CVE-2026-124935Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Undefined behavior in the WebRTC: Networking component
CVE-2026-124934Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Spoofing issue in the Security component
CVE-2026-124933Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Sandbox escape in the Console component
CVE-2026-124932Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Graphics component
CVE-2026-124931Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Same-origin policy bypass in the DOM: Core & HTML component
CVE-2026-124930Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Information disclosure in the Address Bar component
CVE-2026-124929Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Information disclosure in the Layout: Form Controls component
CVE-2026-124927Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component
CVE-2026-124926Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the WebRTC component
CVE-2026-124924Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebRender component
CVE-2026-124922Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the CSS Transitions and Animations component
CVE-2026-124919Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124918Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124917Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124915Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebGPU component
CVE-2026-124914Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Site isolation issue in the DOM: Navigation component
CVE-2026-124913Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Site isolation issue in the Networking component
CVE-2026-124912Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Spoofing issue in the DOM: Security component
CVE-2026-124910Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Mitigation bypass in the WebExtensions component
CVE-2026-124909Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Information disclosure in the Private Browsing component
CVE-2026-124907Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124906Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Graphics: WebRender component
CVE-2026-124905Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Sandbox escape in the DOM: Navigation component