The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:5931 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

    * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4689)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

    * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)

    * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

    * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

    * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4690)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

    * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

    * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)

    * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

    * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)

    * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149     and Thunderbird 149 (CVE-2026-4720)

    * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

    * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 32819a60-2943-11f1-8461-b42e991fc52e advisory.

    CVE-2026-4721: Memory safety bugs. Potential arbitrary code             execution.
    CVE-2026-4709: Incorrect boundary conditions in the             Audio/Video: GMP component.
    CVE-2026-4707: Incorrect boundary conditions in the Graphics:
            Canvas2D component.
    CVE-2026-4706: Incorrect boundary conditions in the Graphics:
            Canvas2D component.
    CVE-2026-4699: Incorrect boundary conditions in the Layout:
            Text and Fonts component.
    CVE-2026-4698: JIT miscompilation in the JavaScript Engine:
            JIT component.
    CVE-2026-4696: Use-after-free in the Layout: Text and Fonts             component.
    CVE-2026-4694: Incorrect boundary conditions, integer             overflow in the Graphics component.
    CVE-2026-4693: Incorrect boundary conditions in the             Audio/Video: Playback component.
    CVE-2026-4692: Sandbox escape in the Responsive Design Mode             component.
    CVE-2026-4691: Use-after-free in the CSS Parsing and             Computation component.
    CVE-2026-4690: Sandbox escape due to integer overflow in the             XPCOM component.
    CVE-2026-4689: Sandbox escape due to integer overflow in the             XPCOM component.
    CVE-2026-4687: Sandbox escape in the Telemetry component.
    CVE-2026-4686: Incorrect boundary conditions in the Graphics:
            Canvas2D component.
    CVE-2026-4685: Incorrect boundary conditions in the Graphics:
            Canvas2D component.
    CVE-2026-4684: Race condition, use-after-free in the             Graphics: WebRender component.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-5931 advisory.

    [140.9.0-1.0.1]
    - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

    [140.9.0-1]
    - Update to 140.9.0 ESR

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:5932 advisory.

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird     ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
      * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
      * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4706)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the     XPCOM component (CVE-2026-4689)
      * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
      * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)
      * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)
      * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
      * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4685)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
      * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the     XPCOM component (CVE-2026-4690)
      * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4686)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
      * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
      * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)
      * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)
      * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
      * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
      * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)
      * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox     149 and Thunderbird 149 (CVE-2026-4720)
      * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4707)
      * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:8850 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

    * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4689)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

    * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)

    * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

    * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

    * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4690)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

    * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

    * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)

    * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

    * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)

    * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149     and Thunderbird 149 (CVE-2026-4720)

    * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

    * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

    * thunderbird: Out of bounds read in IMAP parsing (CVE-2026-4371)

    * thunderbird: Spoofing issue in Thunderbird (CVE-2026-3889)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:7845 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

    * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4689)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

    * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)

    * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

    * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

    * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4690)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

    * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

    * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)

    * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

    * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)

    * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149     and Thunderbird 149 (CVE-2026-4720)

    * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

    * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:7841 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

    * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4689)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

    * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)

    * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

    * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

    * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4690)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

    * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

    * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)

    * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

    * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)

    * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149     and Thunderbird 149 (CVE-2026-4720)

    * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

    * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:7839 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

    * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4689)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

    * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)

    * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

    * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

    * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4690)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

    * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

    * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)

    * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

    * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)

    * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149     and Thunderbird 149 (CVE-2026-4720)

    * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

    * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1127-1 advisory.

    Update to Firefox 140.9.0 ESR (MFSA 2026-22, bsc#1260083):

      - CVE-2026-4684: Race condition, use-after-free in the Graphics: WebRender component
      - CVE-2026-4685: Incorrect boundary conditions in the Graphics: Canvas2D component
      - CVE-2026-4686: Incorrect boundary conditions in the Graphics: Canvas2D component
      - CVE-2026-4687: Sandbox escape due to incorrect boundary conditions in the Telemetry component
      - CVE-2026-4688: Sandbox escape due to use-after-free in the Disability Access APIs component
      - CVE-2026-4689: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component
      - CVE-2026-4690: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component
      - CVE-2026-4691: Use-after-free in the CSS Parsing and Computation component
      - CVE-2026-4692: Sandbox escape in the Responsive Design Mode component
      - CVE-2026-4693: Incorrect boundary conditions in the Audio/Video: Playback component
      - CVE-2026-4694: Incorrect boundary conditions, integer overflow in the Graphics component
      - CVE-2026-4695: Incorrect boundary conditions in the Audio/Video: Web Codecs component
      - CVE-2026-4696: Use-after-free in the Layout: Text and Fonts component
      - CVE-2026-4697: Incorrect boundary conditions in the Audio/Video: Web Codecs component
      - CVE-2026-4698: JIT miscompilation in the JavaScript Engine: JIT component
      - CVE-2026-4699: Incorrect boundary conditions in the Layout: Text and Fonts component
      - CVE-2026-4700: Mitigation bypass in the Networking: HTTP component
      - CVE-2026-4701: Use-after-free in the JavaScript Engine component
      - CVE-2026-4702: JIT miscompilation in the JavaScript Engine component
      - CVE-2026-4704: Denial-of-service in the WebRTC: Signaling component
      - CVE-2026-4705: Undefined behavior in the WebRTC: Signaling component
      - CVE-2026-4706: Incorrect boundary conditions in the Graphics: Canvas2D component
      - CVE-2026-4707: Incorrect boundary conditions in the Graphics: Canvas2D component
      - CVE-2026-4708: Incorrect boundary conditions in the Graphics component
      - CVE-2026-4709: Incorrect boundary conditions in the Audio/Video: GMP component
      - CVE-2026-4710: Incorrect boundary conditions in the Audio/Video component
      - CVE-2026-4711: Use-after-free in the Widget: Cocoa component
      - CVE-2026-4712: Information disclosure in the Widget: Cocoa component
      - CVE-2026-4713: Incorrect boundary conditions in the Graphics component
      - CVE-2026-4714: Incorrect boundary conditions in the Audio/Video component
      - CVE-2026-4715: Uninitialized memory in the Graphics: Canvas2D component
      - CVE-2026-4716: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component
      - CVE-2026-4717: Privilege escalation in the Netmonitor component
      - CVE-2025-59375: Denial-of-service in the XML component
      - CVE-2026-4718: Undefined behavior in the WebRTC: Signaling component
      - CVE-2026-4719: Incorrect boundary conditions in the Graphics: Text component
      - CVE-2026-4720: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and         Thunderbird 149
      - CVE-2026-4721: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9,         Firefox 149 and Thunderbird 149

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20664-1 advisory.

    Changes in MozillaThunderbird:

    - Mozilla Thunderbird 140.10.0 ESR
      * Newly translated strings were not available in Thunderbird       MFSA 2026-34 (bsc#1262230)
      * CVE-2026-6746 Use-after-free in the DOM: Core & HTML component
      * CVE-2026-6747 Use-after-free in the WebRTC component
      * CVE-2026-6748 Uninitialized memory in the Audio/Video: Web Codecs component
      * CVE-2026-6749 Information disclosure due to uninitialized memory in the Graphics: Canvas2D component
      * CVE-2026-6750 Privilege escalation in the Graphics: WebRender component
      * CVE-2026-6751 Uninitialized memory in the Audio/Video: Web Codecs component
      * CVE-2026-6752 Incorrect boundary conditions in the WebRTC component
      * CVE-2026-6753 Incorrect boundary conditions in the WebRTC component
      * CVE-2026-6754 Use-after-free in the JavaScript Engine component
      * CVE-2026-6757 Invalid pointer in the JavaScript: WebAssembly component
      * CVE-2026-6759 Use-after-free in the Widget: Cocoa component
      * CVE-2026-6761 Privilege escalation in the Networking component
      * CVE-2026-6762 Spoofing issue in the DOM: Core & HTML component
      * CVE-2026-6763 Mitigation bypass in the File Handling component
      * CVE-2026-6764 Incorrect boundary conditions in the DOM: Device Interfaces component
      * CVE-2026-6765 Information disclosure in the Form Autofill component
      * CVE-2026-6766 Incorrect boundary conditions in the Libraries component in NSS
      * CVE-2026-6767 Other issue in the Libraries component in NSS
      * CVE-2026-6769 Privilege escalation in the Debugger component
      * CVE-2026-6770 Other issue in the Storage: IndexedDB component
      * CVE-2026-6771 Mitigation bypass in the DOM: Security component
      * CVE-2026-6772 Incorrect boundary conditions in the Libraries component in NSS
      * CVE-2026-6776 Incorrect boundary conditions in the WebRTC: Networking component
      * CVE-2026-6785 Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR     140.10, Firefox 150 and Thunderbird 150
      * CVE-2026-6786 Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and     Thunderbird 150

    - Mozilla Thunderbird 140.9.1 ESR       MFSA 2026-29
      * CVE-2026-5732 Incorrect boundary conditions, integer overflow in the Graphics: Text component
      * CVE-2026-5731 Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR     140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2
      * CVE-2026-5734 Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox     149.0.2 and Thunderbird 149.0.2

    - Mozilla Thunderbird 140.9.0 ESR       MFSA 2026-24 (bsc#1260083)
      * CVE-2026-3889 Spoofing issue in Thunderbird
      * CVE-2026-4371 Out of bounds read in IMAP parsing
      * CVE-2026-4684 Race condition, use-after-free in the Graphics: WebRender component
      * CVE-2026-4685 Incorrect boundary conditions in the Graphics: Canvas2D component
      * CVE-2026-4686 Incorrect boundary conditions in the Graphics: Canvas2D component
      * CVE-2026-4687 Sandbox escape due to incorrect boundary conditions in the Telemetry component
      * CVE-2026-4688 Sandbox escape due to use-after-free in the Disability Access APIs component
      * CVE-2026-4689 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component
      * CVE-2026-4690 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component
      * CVE-2026-4691 Use-after-free in the CSS Parsing and Computation component
      * CVE-2026-4692 Sandbox escape in the Responsive Design Mode component
      * CVE-2026-4693 Incorrect boundary conditions in the Audio/Video: Playback component
      * CVE-2026-4694 Incorrect boundary conditions, integer overflow in the Graphics component
      * CVE-2026-4695 Incorrect boundary conditions in the Audio/Video: Web Codecs component
      * CVE-2026-4696 Use-after-free in the Layout: Text and Fonts component
      * CVE-2026-4697 Incorrect boundary conditions in the Audio/Video: Web Codecs component
      * CVE-2026-4698 JIT miscompilation in the JavaScript Engine: JIT component
      * CVE-2026-4699 Incorrect boundary conditions in the Layout: Text and Fonts component
      * CVE-2026-4700 Mitigation bypass in the Networking: HTTP component
      * CVE-2026-4701 Use-after-free in the JavaScript Engine component
      * CVE-2026-4702 JIT miscompilation in the JavaScript Engine component
      * CVE-2026-4704 Denial-of-service in the WebRTC: Signaling component
      * CVE-2026-4705 Undefined behavior in the WebRTC: Signaling component
      * CVE-2026-4706 Incorrect boundary conditions in the Graphics: Canvas2D component
      * CVE-2026-4707 Incorrect boundary conditions in the Graphics: Canvas2D component
      * CVE-2026-4708 Incorrect boundary conditions in the Graphics component
      * CVE-2026-4709 Incorrect boundary conditions in the Audio/Video: GMP component
      * CVE-2026-4710 Incorrect boundary conditions in the Audio/Video component
      * CVE-2026-4711 Use-after-free in the Widget: Cocoa component
      * CVE-2026-4712 Information disclosure in the Widget: Cocoa component
      * CVE-2026-4713 Incorrect boundary conditions in the Graphics component
      * CVE-2026-4714 Incorrect boundary conditions in the Audio/Video component
      * CVE-2026-4715 Uninitialized memory in the Graphics: Canvas2D component
      * CVE-2026-4716 Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component
      * CVE-2026-4717 Privilege escalation in the Netmonitor component
      * CVE-2025-59375 Denial-of-service in the XML component
      * CVE-2026-4718 Undefined behavior in the WebRTC: Signaling component
      * CVE-2026-4719 Incorrect boundary conditions in the Graphics: Text component
      * CVE-2026-4720 Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and     Thunderbird 149
      * CVE-2026-4721 Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
303808	RHEL 10 : firefox (RHSA-2026:5931)	Nessus	Red Hat Local Security Checks	2026/3/26	2026/3/26	critical
303906	FreeBSD : Mozilla -- Multiple vulnerabilities (32819a60-2943-11f1-8461-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	2026/3/26	2026/4/30	critical
304149	Oracle Linux 10 : firefox (ELSA-2026-5931)	Nessus	Oracle Linux Local Security Checks	2026/3/28	2026/4/30	critical
304317	AlmaLinux 8 : firefox (ALSA-2026:5932)	Nessus	Alma Linux Local Security Checks	2026/3/30	2026/3/30	critical
307578	RHEL 8 : thunderbird (RHSA-2026:8850)	Nessus	Red Hat Local Security Checks	2026/4/20	2026/4/20	critical
306085	RHEL 9 : firefox (RHSA-2026:7845)	Nessus	Red Hat Local Security Checks	2026/4/13	2026/4/13	critical
306104	RHEL 9 : firefox (RHSA-2026:7841)	Nessus	Red Hat Local Security Checks	2026/4/13	2026/4/13	critical
306112	RHEL 9 : firefox (RHSA-2026:7839)	Nessus	Red Hat Local Security Checks	2026/4/13	2026/4/13	critical
304234	SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:1127-1)	Nessus	SuSE Local Security Checks	2026/3/29	2026/6/26	critical
312141	openSUSE 16 Security Update : MozillaThunderbird (openSUSE-SU-2026:20664-1)	Nessus	SuSE Local Security Checks	2026/5/5	2026/5/5	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical