Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Outdated Thunderbird Browser Exposes Users to Security Threats

published 7 months ago

Summary

An update is available for Thunderbird, a popular email client, to fix several security issues. These issues could allow attackers to execute malicious code or steal sensitive information. It's recommended that you update your Thunderbird browser to the latest version to stay protected.

What to do

Update redhat thunderbird to version 0:140.9.0-1.el10_1.
Update redhat thunderbird-debuginfo to version 0:140.9.0-1.el10_1.
Update redhat thunderbird-debugsource to version 0:140.9.0-1.el10_1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:10.1	redhat	thunderbird	< 0:140.9.0-1.el10_1 Fix: upgrade to 0:140.9.0-1.el10_1
Red Hat:enterprise_linux:10.1	redhat	thunderbird-debuginfo	< 0:140.9.0-1.el10_1 Fix: upgrade to 0:140.9.0-1.el10_1
Red Hat:enterprise_linux:10.1	redhat	thunderbird-debugsource	< 0:140.9.0-1.el10_1 Fix: upgrade to 0:140.9.0-1.el10_1

Original advisory text

Red Hat Security Advisory: thunderbird security update

References

https://access.redhat.com/errata/RHSA-2026:6342 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450710 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450711 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450712 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450713 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450714 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450715 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450718 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450719 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450720 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450721 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450722 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450723 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450724 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450725 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450726 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450727 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450728 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450729 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450730 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450732 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450733 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450734 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450735 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450738 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450739 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450740 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450741 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450742 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450744 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450746 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450747 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450748 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450751 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450752 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450755 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450756 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450757 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2451001 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2451006 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6342.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-3889 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-3889 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-3889 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-3889 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4371 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4371 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4371 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4371 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4684 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4684 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4684 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4684 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4684 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4685 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4685 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4685 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4685 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4685 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4686 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4686 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4686 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4686 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4686 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4687 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4687 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4687 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4687 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4687 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4688 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4688 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4688 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4688 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4688 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4689 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4689 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4689 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4689 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4689 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4690 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4690 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4690 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4690 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4690 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4691 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4691 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4691 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4691 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4691 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4692 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4692 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4692 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4692 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4692 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4693 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4693 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4693 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4693 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4693 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4694 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4694 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4694 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4694 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4694 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4695 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4695 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4695 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4695 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4695 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4696 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4696 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4696 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4696 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4696 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4697 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4697 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4697 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4697 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4697 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4698 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4698 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4698 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4698 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4698 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4699 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4699 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4699 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4699 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4699 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4700 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4700 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4700 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4700 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4700 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4701 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4701 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4701 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4701 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4701 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4702 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4702 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4702 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4702 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4702 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4704 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4704 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4704 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4704 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4704 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4705 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4705 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4705 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4705 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4705 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4706 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4706 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4706 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4706 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4706 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4707 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4707 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4707 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4707 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4707 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4708 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4708 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4708 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4708 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4708 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4709 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4709 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4709 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4709 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4709 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4710 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4710 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4710 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4710 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4710 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4711 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4711 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4711 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4711 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4711 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4712 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4712 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4712 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4712 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4712 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4713 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4713 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4713 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4713 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4713 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4714 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4714 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4714 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4714 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4714 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4715 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4715 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4715 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4715 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4715 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4716 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4716 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4716 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4716 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4716 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4717 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4717 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4717 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4717 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4717 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4718 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4718 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4718 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4718 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4718 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4719 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4719 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4719 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4719 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4719 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4720 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4720 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4720 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4720 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4720 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-4721 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-4721 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-4721 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2026-4721 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2026-4721 Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

8.2 High

Timeline

Published1 Apr 2026

Updated1 Apr 2026

First seen1 Apr 2026

Sources

RHSA-2026:6342 · OSV

Track software like this

Free during beta