Detections
Analytics

AlmaLinux 9.2 [TuxCare] Security Update: thunderbird Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793952112)

critical Nessus Plugin ID 377000

Synopsis

The AlmaLinux host is missing one or more security updates.

Description

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793952112 advisory.

 - Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
 (CVE-2026-117988)

 - Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. (CVE-2026-117877, CVE-2026-117902)

 - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. (CVE-2026-117881, CVE-2026-117887, CVE-2026-117919, CVE-2026-117925, CVE-2026-117936, CVE-2026-117949, CVE-2026-117951)

 - Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. (CVE-2026-117965)

 - Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. (CVE-2026-117882)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected thunderbird package based on the guidance in TuxCare advisory ALMALINUX9.2:CLSA-2026:1793952112.

See Also

https://cve.tuxcare.com/els/releases/CLSA-2026:1793952112

http://www.nessus.org/u?16834add

Plugin Details

Severity: Critical

ID: 377000

File Name: tuxcare_alma_linux_9.2_CLSA-2026-1793952112.nasl

Version: 1.2

Type: Local

Published: 11/6/2026

Updated: 11/6/2026

Supported Sensors: Continuous Assessment, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 92.81

Vendor

Vendor Severity: Critical

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-118179

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS Score Source: CVE-2026-117980

Vulnerability Information

Required KB Items: Host/OS/extended-third-party, Host/local_checks_enabled, Host/AlmaLinux/release, Host/AlmaLinux/rpm-list, Host/cpu

Exploit Ease: No known exploits are available

Patch Publication Date: 11/6/2026

Vulnerability Publication Date: 10/13/2026

Reference Information

CVE: CVE-2026-110247, CVE-2026-113866, CVE-2026-113867, CVE-2026-113868, CVE-2026-113869, CVE-2026-117860, CVE-2026-117865, CVE-2026-117866, CVE-2026-117872, CVE-2026-117874, CVE-2026-117875, CVE-2026-117876, CVE-2026-117877, CVE-2026-117878, CVE-2026-117880, CVE-2026-117881, CVE-2026-117882, CVE-2026-117883, CVE-2026-117887, CVE-2026-117891, CVE-2026-117892, CVE-2026-117898, CVE-2026-117900, CVE-2026-117902, CVE-2026-117906, CVE-2026-117913, CVE-2026-117916, CVE-2026-117919, CVE-2026-117920, CVE-2026-117925, CVE-2026-117927, CVE-2026-117931, CVE-2026-117935, CVE-2026-117936, CVE-2026-117941, CVE-2026-117949, CVE-2026-117951, CVE-2026-117954, CVE-2026-117964, CVE-2026-117965, CVE-2026-117971, CVE-2026-117973, CVE-2026-117974, CVE-2026-117980, CVE-2026-117985, CVE-2026-117986, CVE-2026-117987, CVE-2026-117988, CVE-2026-117997, CVE-2026-118174, CVE-2026-118175, CVE-2026-118176, CVE-2026-118177, CVE-2026-118179, CVE-2026-118180

CLSA: 2026:1793952112

IAVA: 2026-A-1220