CVE-2026-124903Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Sandbox escape due to use-after-free in the IPC component
CVE-2026-124902Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Same-origin policy bypass due to race condition in the Audio/Video component
CVE-2026-124901Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Other issue in the Networking: JAR component
CVE-2026-124899Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component
CVE-2026-124898Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the DOM: Editor component
CVE-2026-124897Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the JavaScript: GC component
CVE-2026-124896Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component
CVE-2026-124895Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Storage: localStorage & sessionStorage component
CVE-2026-124894Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Networking: Cookies component
CVE-2026-124893Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the DOM: Workers component
CVE-2026-124892Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the JavaScript: GC component
CVE-2026-124891Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the DOM: Selection component
CVE-2026-124890Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
CVE-2026-124889Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component
CVE-2026-124888Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component
CVE-2026-124887Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component
CVE-2026-124886Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component
CVE-2026-124885Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Graphics: Text component
CVE-2026-124884Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the JavaScript: GC component
CVE-2026-124883Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
CVE-2026-124882Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component
CVE-2026-124881Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component
CVE-2026-124880Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
CVE-2026-124879Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Invalid pointer in the Networking: Cache component
CVE-2026-124877Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Layout: Positioned component
CVE-2026-124876Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component
CVE-2026-124875Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Incorrect boundary conditions in the DOM: CSS Object Model component
CVE-2026-124874Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Same-origin policy bypass in the Networking: HTTP component
CVE-2026-124873Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Invalid pointer in the DOM: Editor component
CVE-2026-124872Debian Linux, Red Hat Enterprise Linux, IGEL OS, SUSE Linux, Oracle Linux, Mozilla Firefox, Mozilla Firefox ESR…10. Nov 2026
firefox: thunderbird: Use-after-free in the Cycle Collector component