We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.

Mozilla is aware of public exploit code for two new flaws in Firefox, though they are not aware of any attacks thus far. Monitoring for further intel.

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-49621 advisory.

    [140.13.0-1.0.1]
    - Add Oracle prefs

    [140.13.0-1]
    - Update to 140.13.0 ESR

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:49621 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)

    * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)

    * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)

    * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)

    * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-16356)

    * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13     (CVE-2026-16361)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-16352)

    * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component     (CVE-2026-16368)

    * firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153     (CVE-2026-16360)

    * firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)

    * firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)

    * firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)

    * firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component     (CVE-2026-16351)

    * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)

    * firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)

    * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)

    * firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)

    * firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)

    * firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)

    * firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)

    * firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)

    * firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)

    * thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding (CVE-2026-14899)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47104 advisory.

    * libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode     (CVE-2026-56208)

    * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)

    * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)

    * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)

    * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)

    * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-16356)

    * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13     (CVE-2026-16361)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-16352)

    * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component     (CVE-2026-16368)

    * firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153     (CVE-2026-16360)

    * firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)

    * firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)

    * firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)

    * firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component     (CVE-2026-16351)

    * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)

    * firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)

    * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)

    * firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)

    * firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)

    * firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)

    * firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)

    * firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)

    * firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47104 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode     (CVE-2026-56208)

    * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)

    * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)

    * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)

    * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)

    * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-16356)

    * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13     (CVE-2026-16361)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-16352)

    * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component     (CVE-2026-16368)

    * firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153     (CVE-2026-16360)

    * firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)

    * firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)

    * firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)

    * firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component     (CVE-2026-16351)

    * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)

    * firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)

    * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)

    * firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)

    * firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)

    * firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)

    * firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)

    * firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)

    * firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47104 advisory.

    [140.13.0-1.0.1]
    - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

    [140.13.0]
    - Add debranding patches (Mustafa Gezen)
    - Add OpenELA default preferences (Louis Abel)

    [140.13.0-1]
    - Update to 140.13.0 ESR

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47101 advisory.

    * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)

    * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)

    * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)

    * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)

    * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-16356)

    * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13     (CVE-2026-16361)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-16352)

    * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component     (CVE-2026-16368)

    * firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153     (CVE-2026-16360)

    * firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)

    * firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)

    * firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)

    * firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component     (CVE-2026-16351)

    * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)

    * firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)

    * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)

    * firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)

    * firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)

    * firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)

    * firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)

    * firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)

    * firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47105 advisory.

    * libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode     (CVE-2026-56208)

    * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)

    * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)

    * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)

    * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)

    * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-16356)

    * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13     (CVE-2026-16361)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-16352)

    * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component     (CVE-2026-16368)

    * firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153     (CVE-2026-16360)

    * firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)

    * firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)

    * firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)

    * firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component     (CVE-2026-16351)

    * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)

    * firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)

    * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)

    * firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)

    * firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)

    * firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)

    * firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)

    * firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)

    * firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-47105 advisory.

    [140.13.0-1.0.1]
    - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789]
    - diable wasi_sdk to prevent build failure with newer llvm

    [140.13.0]
    - Add debranding patches (Mustafa Gezen)
    - Add OpenELA default preferences (Louis Abel)

    [140.13.0-1]
    - Update to 140.13.0 ESR

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:47101 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)

    * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)

    * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)

    * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)

    * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-16356)

    * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13     (CVE-2026-16361)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-16352)

    * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component     (CVE-2026-16368)

    * firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153     (CVE-2026-16360)

    * firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)

    * firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)

    * firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)

    * firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component     (CVE-2026-16351)

    * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)

    * firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)

    * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)

    * firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)

    * firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)

    * firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)

    * firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)

    * firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)

    * firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:47105 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode     (CVE-2026-56208)

    * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)

    * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)

    * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)

    * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)

    * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-16356)

    * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13     (CVE-2026-16361)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-16352)

    * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component     (CVE-2026-16368)

    * firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153     (CVE-2026-16360)

    * firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)

    * firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)

    * firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)

    * firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component     (CVE-2026-16351)

    * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)

    * firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)

    * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)

    * firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)

    * firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)

    * firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)

    * firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)

    * firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)

    * firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3221-1 advisory.

    This update for MozillaFirefox fixes the following issue:

    - Firefox Extended Support Release 140.13.0 ESR (MFSA 2026-70, bsc#1271649):

    - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component.
    - CVE-2026-15719: Site isolation issue in the DOM: Navigation component.
    - CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component.
    - CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb component.
    - CVE-2026-16351: Sandbox escape due to use-after-free in the DOM: Navigation component.
    - CVE-2026-16352: Sandbox escape due to use-after-free in the Disability Access APIs component.
    - CVE-2026-16353: Invalid pointer in the DOM: Bindings (WebIDL) component.
    - CVE-2026-16354: Information disclosure in the Graphics: ImageLib component.
    - CVE-2026-16355: JIT miscompilation in the JavaScript Engine: JIT component.
    - CVE-2026-16356: Sandbox escape due to use-after-free in the Disability Access APIs component.
    - CVE-2026-16357: Incorrect boundary conditions in the Graphics component.
    - CVE-2026-16358: Site isolation issue in the Graphics: WebRender component.
    - CVE-2026-16359: Incorrect boundary conditions in the Audio/Video: GMP component.
    - CVE-2026-16360: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153.
    - CVE-2026-16361: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13.
    - CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component.
    - CVE-2026-16363: JIT miscompilation in the JavaScript: WebAssembly component.
    - CVE-2026-16368: Incorrect boundary conditions in the JavaScript: WebAssembly component.
    - CVE-2026-16369: Integer overflow in the JavaScript: WebAssembly component.
    - CVE-2026-16371: Privilege escalation in the DOM: Navigation component.
    - CVE-2026-16374: Information disclosure in the Framework component in DevTools.
    - CVE-2026-16375: Site isolation issue in the Networking: HTTP component.
    - CVE-2026-16377: Mitigation bypass in the PDF Viewer component.
    - CVE-2026-16379: Privilege escalation in the DOM: Content Processes component.
    - CVE-2026-16381: Same-origin policy bypass in the Networking: DNS component.
    - CVE-2026-16383: Mitigation bypass in the DOM: Networking component.
    - CVE-2026-16387: Site isolation issue in the Networking component.
    - CVE-2026-16390: Mitigation bypass in the Enterprise Policies component.
    - CVE-2026-16391: Information disclosure in the Storage: IndexedDB component.
    - CVE-2026-16396: Privilege escalation in WebExtensions.
    - CVE-2026-16405: Information disclosure in the Networking: WebSockets component.
    - CVE-2026-16412: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3200-1 advisory.

    - Firefox Extended Support Release 140.13.0 ESR (MFSA 2026-70, bsc#1271649):

    - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component.
    - CVE-2026-15719: Site isolation issue in the DOM: Navigation component.
    - CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component.
    - CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb component.
    - CVE-2026-16351: Sandbox escape due to use-after-free in the DOM: Navigation component.
    - CVE-2026-16352: Sandbox escape due to use-after-free in the Disability Access APIs component.
    - CVE-2026-16353: Invalid pointer in the DOM: Bindings (WebIDL) component.
    - CVE-2026-16354: Information disclosure in the Graphics: ImageLib component.
    - CVE-2026-16355: JIT miscompilation in the JavaScript Engine: JIT component.
    - CVE-2026-16356: Sandbox escape due to use-after-free in the Disability Access APIs component.
    - CVE-2026-16357: Incorrect boundary conditions in the Graphics component.
    - CVE-2026-16358: Site isolation issue in the Graphics: WebRender component.
    - CVE-2026-16359: Incorrect boundary conditions in the Audio/Video: GMP component.
    - CVE-2026-16360: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153.
    - CVE-2026-16361: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13.
    - CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component.
    - CVE-2026-16363: JIT miscompilation in the JavaScript: WebAssembly component.
    - CVE-2026-16368: Incorrect boundary conditions in the JavaScript: WebAssembly component.
    - CVE-2026-16369: Integer overflow in the JavaScript: WebAssembly component.
    - CVE-2026-16371: Privilege escalation in the DOM: Navigation component.
    - CVE-2026-16374: Information disclosure in the Framework component in DevTools.
    - CVE-2026-16375: Site isolation issue in the Networking: HTTP component.
    - CVE-2026-16377: Mitigation bypass in the PDF Viewer component.
    - CVE-2026-16379: Privilege escalation in the DOM: Content Processes component.
    - CVE-2026-16381: Same-origin policy bypass in the Networking: DNS component.
    - CVE-2026-16383: Mitigation bypass in the DOM: Networking component.
    - CVE-2026-16387: Site isolation issue in the Networking component.
    - CVE-2026-16390: Mitigation bypass in the Enterprise Policies component.
    - CVE-2026-16391: Information disclosure in the Storage: IndexedDB component.
    - CVE-2026-16396: Privilege escalation in WebExtensions.
    - CVE-2026-16405: Information disclosure in the Networking: WebSockets component.
    - CVE-2026-16412: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of mozilla-thunderbird installed on the remote host is prior to 140.13.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-204-01 advisory.

    New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the mozilla-thunderbird security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 140.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-72 advisory.

  - Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed     evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. (CVE-2026-16360, CVE-2026-16412)

  - The code to parse MIME headers for display when forwarding a message (if the setting to view all headers     was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer     for the headers, and potentially crashing Thunderbird. (CVE-2026-14899)

  - We are aware that exploit code for this is public however we are not aware of any attacks in the wild     abusing this flaw. (CVE-2026-15718, CVE-2026-15719)

  - Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153,     Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. (CVE-2026-16349)

  - Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox     153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. (CVE-2026-16350)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-72 advisory.

  - Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed     evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. (CVE-2026-16360, CVE-2026-16412)

  - The code to parse MIME headers for display when forwarding a message (if the setting to view all headers     was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer     for the headers, and potentially crashing Thunderbird. (CVE-2026-14899)

  - We are aware that exploit code for this is public however we are not aware of any attacks in the wild     abusing this flaw. (CVE-2026-15718, CVE-2026-15719)

  - Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153,     Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. (CVE-2026-16349)

  - Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox     153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. (CVE-2026-16350)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6394 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6394-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 22, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : firefox-esr     CVE ID         : CVE-2026-15718 CVE-2026-15719 CVE-2026-16349 CVE-2026-16350                      CVE-2026-16351 CVE-2026-16352 CVE-2026-16353 CVE-2026-16354                      CVE-2026-16355 CVE-2026-16356 CVE-2026-16357 CVE-2026-16358                      CVE-2026-16359 CVE-2026-16360 CVE-2026-16361 CVE-2026-16362                      CVE-2026-16363 CVE-2026-16368 CVE-2026-16369 CVE-2026-16371                      CVE-2026-16374 CVE-2026-16375 CVE-2026-16377 CVE-2026-16379                      CVE-2026-16381 CVE-2026-16383 CVE-2026-16387 CVE-2026-16390                      CVE-2026-16391 CVE-2026-16396 CVE-2026-16405 CVE-2026-16412

    Multiple security issues have been found in the Mozilla Firefox web     browser, which could potentially result in the execution of arbitrary     code, bypass of the same-origin policy, privilege escalation,     information disclosure, spoofing or sandbox escape.

    For the stable distribution (trixie), these problems have been fixed in     version 140.13.0esr-1~deb13u1.

    We recommend that you upgrade your firefox-esr packages.

    For the detailed security status of firefox-esr please refer to its     security tracker page at:
    https://security-tracker.debian.org/tracker/firefox-esr

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4695 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4695-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     July 22, 2026                                 https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : firefox-esr     Version        : 140.13.0esr-1~deb11u1 140.13.0esr-1~deb12u1     CVE ID         : CVE-2026-15718 CVE-2026-15719 CVE-2026-16349 CVE-2026-16350                      CVE-2026-16351 CVE-2026-16352 CVE-2026-16353 CVE-2026-16354                      CVE-2026-16355 CVE-2026-16356 CVE-2026-16357 CVE-2026-16358                      CVE-2026-16359 CVE-2026-16360 CVE-2026-16361 CVE-2026-16362                      CVE-2026-16363 CVE-2026-16368 CVE-2026-16369 CVE-2026-16371                      CVE-2026-16374 CVE-2026-16375 CVE-2026-16377 CVE-2026-16379                      CVE-2026-16381 CVE-2026-16383 CVE-2026-16387 CVE-2026-16390                      CVE-2026-16391 CVE-2026-16396 CVE-2026-16405 CVE-2026-16412

    Multiple security issues have been found in the Mozilla Firefox web     browser, which could potentially result in the execution of arbitrary     code, bypass of the same-origin policy, privilege escalation,     information disclosure, spoofing or sandbox escape.

    For Debian 11 bullseye, these problems have been fixed in version     140.13.0esr-1~deb11u1.

    For Debian 12 bookworm, these problems have been fixed in version     140.13.0esr-1~deb12u1.

    We recommend that you upgrade your firefox-esr packages.

    For the detailed security status of firefox-esr please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/firefox-esr

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of mozilla-firefox installed on the remote host is prior to 140.13.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-202-02 advisory.

    New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the mozilla-firefox security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote Windows host is prior to 115.38. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-69 advisory.

  - We are aware that exploit code for this is public however we are not aware of any attacks in the wild     abusing this flaw. (CVE-2026-15719)

  - Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153,     Firefox ESR 115.38, and Firefox ESR 140.13. (CVE-2026-16349)

  - Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in     Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. (CVE-2026-16351)

  - Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153,     Firefox ESR 115.38, and Firefox ESR 140.13. (CVE-2026-16353)

  - JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153,     Firefox ESR 115.38, and Firefox ESR 140.13. (CVE-2026-16355)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.38. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-69 advisory.

  - We are aware that exploit code for this is public however we are not aware of any attacks in the wild     abusing this flaw. (CVE-2026-15719)

  - Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153,     Firefox ESR 115.38, and Firefox ESR 140.13. (CVE-2026-16349)

  - Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in     Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. (CVE-2026-16351)

  - Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153,     Firefox ESR 115.38, and Firefox ESR 140.13. (CVE-2026-16353)

  - JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153,     Firefox ESR 115.38, and Firefox ESR 140.13. (CVE-2026-16355)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-70 advisory.

  - Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort some of these could have been exploited to run     arbitrary code. (CVE-2026-16412)

  - We are aware that exploit code for this is public however we are not aware of any attacks in the wild     abusing this flaw. (CVE-2026-15718, CVE-2026-15719)

  - Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153,     Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. (CVE-2026-16349)

  - Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox     153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. (CVE-2026-16350)

  - Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Firefox     ESR 140.13, Thunderbird 153, and Thunderbird 140.13. (CVE-2026-16362)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote Windows host is prior to 140.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-70 advisory.

  - Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort some of these could have been exploited to run     arbitrary code. (CVE-2026-16412)

  - We are aware that exploit code for this is public however we are not aware of any attacks in the wild     abusing this flaw. (CVE-2026-15718, CVE-2026-15719)

  - Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153,     Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. (CVE-2026-16349)

  - Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox     153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. (CVE-2026-16350)

  - Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Firefox     ESR 140.13, Thunderbird 153, and Thunderbird 140.13. (CVE-2026-16362)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-365cce949c advisory.

    - New upstream release (152.0.6)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-51c2920764 advisory.

    - New upstream release (152.0.6)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - We are aware that exploit code for this is public however we are not aware of any attacks in the wild     abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR     140.13, and Thunderbird 140.13. (CVE-2026-15719)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 152.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-67 advisory.

  - We are aware that exploit code for this is public however we are not aware of any attacks in the wild     abusing this flaw. (CVE-2026-15718, CVE-2026-15719)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 152.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-67 advisory.

  - We are aware that exploit code for this is public however we are not aware of any attacks in the wild     abusing this flaw. (CVE-2026-15718, CVE-2026-15719)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
331815	Oracle Linux 10 : thunderbird (ELSA-2026-49621)	Nessus	Oracle Linux Local Security Checks	critical
331759	RHEL 10 : thunderbird (RHSA-2026:49621)	Nessus	Red Hat Local Security Checks	critical
331731	RockyLinux 9 : firefox (RLSA-2026:47104)	Nessus	Rocky Linux Local Security Checks	critical
331715	RHEL 9 : firefox (RHSA-2026:47104)	Nessus	Red Hat Local Security Checks	critical
331325	Oracle Linux 9 : firefox (ELSA-2026-47104)	Nessus	Oracle Linux Local Security Checks	critical
330840	RockyLinux 10 : firefox (RLSA-2026:47101)	Nessus	Rocky Linux Local Security Checks	critical
330691	RockyLinux 8 : firefox (RLSA-2026:47105)	Nessus	Rocky Linux Local Security Checks	critical
330615	Oracle Linux 8 : firefox (ELSA-2026-47105)	Nessus	Oracle Linux Local Security Checks	critical
330449	RHEL 10 : firefox (RHSA-2026:47101)	Nessus	Red Hat Local Security Checks	critical
330443	RHEL 8 : firefox (RHSA-2026:47105)	Nessus	Red Hat Local Security Checks	critical
329504	SUSE SLED15: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:3221-1)	Nessus	SuSE Local Security Checks	critical
329294	SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:3200-1)	Nessus	SuSE Local Security Checks	critical
329266	Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2026-204-01)	Nessus	Slackware Local Security Checks	critical
329091	Mozilla Thunderbird < 140.13	Nessus	Windows	critical
329089	Mozilla Thunderbird < 140.13	Nessus	MacOS X Local Security Checks	critical
329076	Debian dsa-6394 : firefox-esr - security update	Nessus	Debian Local Security Checks	critical
329074	Debian dla-4695 : firefox-esr - security update	Nessus	Debian Local Security Checks	critical
328880	Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2026-202-02)	Nessus	Slackware Local Security Checks	critical
328776	Mozilla Firefox ESR < 115.38	Nessus	Windows	critical
328775	Mozilla Firefox ESR < 115.38	Nessus	MacOS X Local Security Checks	critical
328772	Mozilla Firefox ESR < 140.13	Nessus	MacOS X Local Security Checks	critical
328771	Mozilla Firefox ESR < 140.13	Nessus	Windows	critical
327553	Fedora 43 : firefox (2026-365cce949c)	Nessus	Fedora Local Security Checks	medium
327225	Fedora 44 : firefox (2026-51c2920764)	Nessus	Fedora Local Security Checks	medium
327166	Linux Distros Unpatched Vulnerability : CVE-2026-15719	Nessus	Misc.	medium
326753	Mozilla Firefox < 152.0.6	Nessus	MacOS X Local Security Checks	medium
326752	Mozilla Firefox < 152.0.6	Nessus	Windows	medium

Detections

Analytics

CVE-2026-15719

medium

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

medium

medium

medium

medium

medium