The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_10766 advisory.

    * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)

    * firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component (CVE-2026-6762)

    * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)

    * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)

    * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)

    * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox     150 and Thunderbird 150 (CVE-2026-6786)

    * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)

    * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)

    * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D     component (CVE-2026-6749)

    * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)

    * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)

    * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)

    * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)

    * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird     ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)

    * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component     (CVE-2026-6764)

    * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)

    * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)

    * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)

    * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)

    * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-6746)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_10767 advisory.

    * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)

    * firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component (CVE-2026-6762)

    * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)

    * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)

    * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)

    * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox     150 and Thunderbird 150 (CVE-2026-6786)

    * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)

    * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)

    * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D     component (CVE-2026-6749)

    * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)

    * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)

    * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)

    * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)

    * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird     ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)

    * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component     (CVE-2026-6764)

    * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)

    * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)

    * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)

    * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)

    * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-6746)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1781204847 advisory.

  - Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150,     Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. (CVE-2026-6757)

  - Privilege escalation in the Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR     140.10, Thunderbird 150, and Thunderbird 140.10. (CVE-2026-6761)

  - Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in     Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. (CVE-2026-6764)

  - Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox ESR     140.10, Thunderbird 150, and Thunderbird 140.10. (CVE-2026-6771)

  - Spoofing issue in the Web Speech component. This vulnerability was fixed in Firefox 151 and Thunderbird     151. (CVE-2026-8963)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101288 advisory.

    Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in     Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20664-1 advisory.

    Changes in MozillaThunderbird:

    - Mozilla Thunderbird 140.10.0 ESR
      * Newly translated strings were not available in Thunderbird       MFSA 2026-34 (bsc#1262230)
      * CVE-2026-6746 Use-after-free in the DOM: Core & HTML component
      * CVE-2026-6747 Use-after-free in the WebRTC component
      * CVE-2026-6748 Uninitialized memory in the Audio/Video: Web Codecs component
      * CVE-2026-6749 Information disclosure due to uninitialized memory in the Graphics: Canvas2D component
      * CVE-2026-6750 Privilege escalation in the Graphics: WebRender component
      * CVE-2026-6751 Uninitialized memory in the Audio/Video: Web Codecs component
      * CVE-2026-6752 Incorrect boundary conditions in the WebRTC component
      * CVE-2026-6753 Incorrect boundary conditions in the WebRTC component
      * CVE-2026-6754 Use-after-free in the JavaScript Engine component
      * CVE-2026-6757 Invalid pointer in the JavaScript: WebAssembly component
      * CVE-2026-6759 Use-after-free in the Widget: Cocoa component
      * CVE-2026-6761 Privilege escalation in the Networking component
      * CVE-2026-6762 Spoofing issue in the DOM: Core & HTML component
      * CVE-2026-6763 Mitigation bypass in the File Handling component
      * CVE-2026-6764 Incorrect boundary conditions in the DOM: Device Interfaces component
      * CVE-2026-6765 Information disclosure in the Form Autofill component
      * CVE-2026-6766 Incorrect boundary conditions in the Libraries component in NSS
      * CVE-2026-6767 Other issue in the Libraries component in NSS
      * CVE-2026-6769 Privilege escalation in the Debugger component
      * CVE-2026-6770 Other issue in the Storage: IndexedDB component
      * CVE-2026-6771 Mitigation bypass in the DOM: Security component
      * CVE-2026-6772 Incorrect boundary conditions in the Libraries component in NSS
      * CVE-2026-6776 Incorrect boundary conditions in the WebRTC: Networking component
      * CVE-2026-6785 Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR     140.10, Firefox 150 and Thunderbird 150
      * CVE-2026-6786 Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and     Thunderbird 150

    - Mozilla Thunderbird 140.9.1 ESR       MFSA 2026-29
      * CVE-2026-5732 Incorrect boundary conditions, integer overflow in the Graphics: Text component
      * CVE-2026-5731 Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR     140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2
      * CVE-2026-5734 Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox     149.0.2 and Thunderbird 149.0.2

    - Mozilla Thunderbird 140.9.0 ESR       MFSA 2026-24 (bsc#1260083)
      * CVE-2026-3889 Spoofing issue in Thunderbird
      * CVE-2026-4371 Out of bounds read in IMAP parsing
      * CVE-2026-4684 Race condition, use-after-free in the Graphics: WebRender component
      * CVE-2026-4685 Incorrect boundary conditions in the Graphics: Canvas2D component
      * CVE-2026-4686 Incorrect boundary conditions in the Graphics: Canvas2D component
      * CVE-2026-4687 Sandbox escape due to incorrect boundary conditions in the Telemetry component
      * CVE-2026-4688 Sandbox escape due to use-after-free in the Disability Access APIs component
      * CVE-2026-4689 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component
      * CVE-2026-4690 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component
      * CVE-2026-4691 Use-after-free in the CSS Parsing and Computation component
      * CVE-2026-4692 Sandbox escape in the Responsive Design Mode component
      * CVE-2026-4693 Incorrect boundary conditions in the Audio/Video: Playback component
      * CVE-2026-4694 Incorrect boundary conditions, integer overflow in the Graphics component
      * CVE-2026-4695 Incorrect boundary conditions in the Audio/Video: Web Codecs component
      * CVE-2026-4696 Use-after-free in the Layout: Text and Fonts component
      * CVE-2026-4697 Incorrect boundary conditions in the Audio/Video: Web Codecs component
      * CVE-2026-4698 JIT miscompilation in the JavaScript Engine: JIT component
      * CVE-2026-4699 Incorrect boundary conditions in the Layout: Text and Fonts component
      * CVE-2026-4700 Mitigation bypass in the Networking: HTTP component
      * CVE-2026-4701 Use-after-free in the JavaScript Engine component
      * CVE-2026-4702 JIT miscompilation in the JavaScript Engine component
      * CVE-2026-4704 Denial-of-service in the WebRTC: Signaling component
      * CVE-2026-4705 Undefined behavior in the WebRTC: Signaling component
      * CVE-2026-4706 Incorrect boundary conditions in the Graphics: Canvas2D component
      * CVE-2026-4707 Incorrect boundary conditions in the Graphics: Canvas2D component
      * CVE-2026-4708 Incorrect boundary conditions in the Graphics component
      * CVE-2026-4709 Incorrect boundary conditions in the Audio/Video: GMP component
      * CVE-2026-4710 Incorrect boundary conditions in the Audio/Video component
      * CVE-2026-4711 Use-after-free in the Widget: Cocoa component
      * CVE-2026-4712 Information disclosure in the Widget: Cocoa component
      * CVE-2026-4713 Incorrect boundary conditions in the Graphics component
      * CVE-2026-4714 Incorrect boundary conditions in the Audio/Video component
      * CVE-2026-4715 Uninitialized memory in the Graphics: Canvas2D component
      * CVE-2026-4716 Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component
      * CVE-2026-4717 Privilege escalation in the Netmonitor component
      * CVE-2025-59375 Denial-of-service in the XML component
      * CVE-2026-4718 Undefined behavior in the WebRTC: Signaling component
      * CVE-2026-4719 Incorrect boundary conditions in the Graphics: Text component
      * CVE-2026-4720 Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and     Thunderbird 149
      * CVE-2026-4721 Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
354391	Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2026_10766)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	critical
353744	Rocky Linux 10.1 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2026_10767)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	critical
360052	AlmaLinux 9.2 [TuxCare] Security Update: thunderbird Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1781204847)	Nessus	Alma Linux Local Security Checks	10/1/2026	10/1/2026	critical
336986	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101288)	Nessus	Unity Linux Local Security Checks	8/17/2026	8/17/2026	medium
312141	openSUSE 16 Security Update : MozillaThunderbird (openSUSE-SU-2026:20664-1)	Nessus	SuSE Local Security Checks	5/5/2026	5/5/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical

medium

critical