Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Thunderbird: Unpatched Bugs in Email Client

published 10 months ago

Summary

Thunderbird, a popular email client, has a security update available to fix unpatched bugs that could allow hackers to execute malicious code on your computer. This is a critical update that you should install as soon as possible to protect your device and personal data. If you use Thunderbird, check for updates and install the latest version.

What to do

Update redhat thunderbird to version 0:140.6.0-1.el8_10.
Update redhat thunderbird-debuginfo to version 0:140.6.0-1.el8_10.
Update redhat thunderbird-debugsource to version 0:140.6.0-1.el8_10.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:8::appstream	redhat	thunderbird	< 0:140.6.0-1.el8_10 Fix: upgrade to 0:140.6.0-1.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	thunderbird-debuginfo	< 0:140.6.0-1.el8_10 Fix: upgrade to 0:140.6.0-1.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	thunderbird-debugsource	< 0:140.6.0-1.el8_10 Fix: upgrade to 0:140.6.0-1.el8_10

Original advisory text

Red Hat Security Advisory: thunderbird security update

References

https://access.redhat.com/errata/RHSA-2026:0026 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420502 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420503 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420504 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420506 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420508 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420509 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420512 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420513 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420516 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420517 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0026.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-14321 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14321 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14321 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14321 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-96/#CVE-2025-14321 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14322 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14322 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14322 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14322 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14323 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14323 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14323 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14323 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14324 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14324 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14324 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14324 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14325 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14325 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14325 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14325 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14328 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14328 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14328 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14328 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14329 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14329 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14329 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14329 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14330 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14330 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14330 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14330 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14331 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14331 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14331 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14331 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14333 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14333 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14333 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14333 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.5 High

Timeline

Published5 Jan 2026

Updated4 Jul 2026

First seen4 Jul 2026

Sources

RHSA-2026:0026 · OSV

Track software like this

Free during beta