The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-34badbe9b9 advisory.

    - New upstream version (139.0)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-154362 advisory.

    Memory safety bugs present in Firefox 138 and Thunderbird 138. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort some of these could have been exploited to run     arbitrary code. This vulnerability affects Firefox < 139 and Thunderbird < 139.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787115646 advisory.

  - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in     XML_ExternalEntityParserCreate in out-of-memory situations. (CVE-2022-43680)

  - A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity     expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat     can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could     lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the     environment and library usage. (CVE-2024-8176)

  - Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox     143 and Thunderbird 143. (CVE-2025-10530)

  - Mitigation bypass in the Web Compatibility: Tooling component. This vulnerability was fixed in Firefox 143     and Thunderbird 143. (CVE-2025-10531)

  - Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained     with other vulnerabilities, could be used to escalate privileges. *This bug only affects Thunderbird for     macOS. Other versions of Thunderbird are unaffected.*. This vulnerability was fixed in Firefox 138,     Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10. (CVE-2025-4082)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 139.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-42 advisory.

  - Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. (CVE-2025-5268)

  - A double-free could have occurred in `vpxcodecencinitmulti` after a failed allocation when initializing     the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash.
    (CVE-2025-5283)

  - Error handling for script execution was incorrectly isolated from web content, which could have allowed     cross-origin leak attacks. (CVE-2025-5263)

  - Due to insufficient escaping of the newline character in the Copy as cURL feature, an attacker could     trick a user into using this command, potentially leading to local code execution on the user's system.
    (CVE-2025-5264)

  - Due to insufficient escaping of the ampersand character in the Copy as cURL feature, an attacker     could trick a user into using this command, potentially leading to local code execution on the user's     system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.
    (CVE-2025-5265)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 139.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-45 advisory.

  - Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. (CVE-2025-5268)

  - A double-free could have occurred in `vpxcodecencinitmulti` after a failed allocation when initializing     the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash.
    (CVE-2025-5283)

  - Error handling for script execution was incorrectly isolated from web content, which could have allowed     cross-origin leak attacks. (CVE-2025-5263)

  - Due to insufficient escaping of the newline character in the Copy as cURL feature, an attacker could     trick a user into using this command, potentially leading to local code execution on the user's system.
    (CVE-2025-5264)

  - Due to insufficient escaping of the ampersand character in the Copy as cURL feature, an attacker     could trick a user into using this command, potentially leading to local code execution on the user's     system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.
    (CVE-2025-5265)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7991-1 advisory.

    Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially     crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of     service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute     arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 139.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-42 advisory.

  - Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. (CVE-2025-5268)

  - A double-free could have occurred in `vpxcodecencinitmulti` after a failed allocation when initializing     the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash.
    (CVE-2025-5283)

  - Error handling for script execution was incorrectly isolated from web content, which could have allowed     cross-origin leak attacks. (CVE-2025-5263)

  - Due to insufficient escaping of the newline character in the Copy as cURL feature, an attacker could     trick a user into using this command, potentially leading to local code execution on the user's system.
    (CVE-2025-5264)

  - Due to insufficient escaping of the ampersand character in the Copy as cURL feature, an attacker     could trick a user into using this command, potentially leading to local code execution on the user's     system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.
    (CVE-2025-5265)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a14dbea7-3d7c-11f0-9a55-b42e991fc52e advisory.

    security@mozilla.org reports:
    Memory safety bugs present in Firefox 138 and Thunderbird               138. Some of these bugs showed evidence of memory corruption               and we presume that with enough effort some of these could               have been exploited to run arbitrary code.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 139.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-45 advisory.

  - Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. (CVE-2025-5268)

  - A double-free could have occurred in `vpxcodecencinitmulti` after a failed allocation when initializing     the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash.
    (CVE-2025-5283)

  - Error handling for script execution was incorrectly isolated from web content, which could have allowed     cross-origin leak attacks. (CVE-2025-5263)

  - Due to insufficient escaping of the newline character in the Copy as cURL feature, an attacker could     trick a user into using this command, potentially leading to local code execution on the user's system.
    (CVE-2025-5264)

  - Due to insufficient escaping of the ampersand character in the Copy as cURL feature, an attacker     could trick a user into using this command, potentially leading to local code execution on the user's     system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.
    (CVE-2025-5265)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Memory safety bugs present in Firefox 138 and Thunderbird 138. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort some of these could have been exploited to run     arbitrary code. This vulnerability was fixed in Firefox 139 and Thunderbird 139. (CVE-2025-5272)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
238073	Fedora 42 : firefox (2025-34badbe9b9)	Nessus	Fedora Local Security Checks	6/10/2025	8/12/2025	high
380852	Unity Linux 20.1070e Security Update: firefox (UTSA-2026-154362)	Nessus	Unity Linux Local Security Checks	11/14/2026	11/14/2026	high
360063	AlmaLinux 9.2 [TuxCare] Security Update: thunderbird Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1787115646)	Nessus	Alma Linux Local Security Checks	10/1/2026	11/3/2026	critical
237299	Mozilla Firefox < 139.0	Nessus	MacOS X Local Security Checks	5/27/2025	11/18/2025	high
237386	Mozilla Thunderbird < 139.0	Nessus	MacOS X Local Security Checks	5/27/2025	11/18/2025	high
297659	Ubuntu 22.04 LTS : Thunderbird vulnerabilities (USN-7991-1)	Nessus	Ubuntu Local Security Checks	2/3/2026	2/24/2026	medium
237298	Mozilla Firefox < 139.0	Nessus	Windows	5/27/2025	11/18/2025	high
237614	FreeBSD : Mozilla -- Memory safety bugs (a14dbea7-3d7c-11f0-9a55-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	5/31/2025	8/12/2025	high
237385	Mozilla Thunderbird < 139.0	Nessus	Windows	5/27/2025	11/18/2025	high
250100	Linux Distros Unpatched Vulnerability : CVE-2025-5272	Nessus	Misc.	8/15/2025	7/25/2026	high

Detections

Analytics

Plugins Search

high

high

critical

high

high

medium

high

high

high

high