The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:27717 advisory.

    * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12313)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12311)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox     152 and Thunderbird 152 (CVE-2026-12327)

    * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird     ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

    * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component     (CVE-2026-12330)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

    * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

    * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

    * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

    * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component     (CVE-2026-12297)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

    * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-12324)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

    * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

    * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2583-1 advisory.

    Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071):

    - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component.
    - CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12291: Use-after-free in the Networking: HTTP component.
    - CVE-2026-12292: Incorrect boundary conditions in the Web Audio component.
    - CVE-2026-12294: Sandbox escape in the DOM: Workers component.
    - CVE-2026-12295: Sandbox escape in the DOM: Navigation component.
    - CVE-2026-12296: Sandbox escape in the Security: Process Sandboxing component.
    - CVE-2026-12297: Sandbox escape due to incorrect boundary conditions in the Networking component.
    - CVE-2026-12298: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12299: JIT miscompilation in the DOM: Core & HTML component.
    - CVE-2026-12302: Mitigation bypass in the DOM: Security component.
    - CVE-2026-12304: Same-origin policy bypass in the Networking: Cookies component.
    - CVE-2026-12305: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12306: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12307: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12308: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12309: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12310: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12311: Information disclosure, sandbox escape in the Security: Process Sandboxing component.
    - CVE-2026-12312: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12313: Information disclosure, sandbox escape in the Security: Process Sandboxing component.
    - CVE-2026-12314: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12315: Mitigation bypass in the DOM: Security component.
    - CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL component.
    - CVE-2026-12325: Denial-of-service in the Graphics: ImageLib component.
    - CVE-2026-12327: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and     Thunderbird       152.
    - CVE-2026-12328: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR     140.12, Firefox       152 and Thunderbird 152.
    - CVE-2026-12329: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12330: Incorrect boundary conditions in the Internationalization component.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:29940 advisory.

    * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)
      * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12313)
      * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12311)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox     152 and Thunderbird 152 (CVE-2026-12327)
      * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)
      * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird     ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)
      * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component     (CVE-2026-12330)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)
      * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)
      * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)
      * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)
      * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)
      * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component     (CVE-2026-12297)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)
      * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-12324)
      * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)
      * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)
      * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:33445 advisory.

    * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)
      * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12313)
      * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12311)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox     152 and Thunderbird 152 (CVE-2026-12327)
      * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)
      * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird     ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)
      * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component     (CVE-2026-12330)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)
      * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)
      * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)
      * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)
      * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)
      * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component     (CVE-2026-12297)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)
      * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-12324)
      * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)
      * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)
      * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2fb5ca48a2 advisory.

    Update to latest upstream version

    ----

    Update to latest upstream version.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of mozilla-firefox installed on the remote host is prior to 140.12.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-168-03 advisory.

    New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the mozilla-firefox security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:33445 advisory.

    * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12313)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12311)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox     152 and Thunderbird 152 (CVE-2026-12327)

    * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird     ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

    * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component     (CVE-2026-12330)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

    * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

    * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

    * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

    * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component     (CVE-2026-12297)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

    * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-12324)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

    * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

    * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36101 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12313)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12311)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox     152 and Thunderbird 152 (CVE-2026-12327)

    * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird     ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

    * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component     (CVE-2026-12330)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

    * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

    * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

    * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

    * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component     (CVE-2026-12297)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

    * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-12324)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

    * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

    * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:36103 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12313)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12311)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox     152 and Thunderbird 152 (CVE-2026-12327)

    * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird     ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

    * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component     (CVE-2026-12330)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

    * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

    * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

    * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

    * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component     (CVE-2026-12297)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

    * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-12324)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

    * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

    * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:38753 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12313)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12311)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox     152 and Thunderbird 152 (CVE-2026-12327)

    * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird     ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

    * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component     (CVE-2026-12330)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

    * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

    * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

    * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

    * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component     (CVE-2026-12297)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

    * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-12324)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

    * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

    * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2852-1 advisory.

    This update for MozillaThunderbird fixes the following issues

    Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071):

    - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component.
    - CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12291: Use-after-free in the Networking: HTTP component.
    - CVE-2026-12292: Incorrect boundary conditions in the Web Audio component.
    - CVE-2026-12294: Sandbox escape in the DOM: Workers component.
    - CVE-2026-12295: Sandbox escape in the DOM: Navigation component.
    - CVE-2026-12296: Sandbox escape in the Security: Process Sandboxing component.
    - CVE-2026-12297: Sandbox escape due to incorrect boundary conditions in the Networking component.
    - CVE-2026-12298: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12299: JIT miscompilation in the DOM: Core & HTML component.
    - CVE-2026-12302: Mitigation bypass in the DOM: Security component.
    - CVE-2026-12304: Same-origin policy bypass in the Networking: Cookies component.
    - CVE-2026-12305: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12306: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12307: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12308: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12309: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12310: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12311: Information disclosure, sandbox escape in the Security: Process Sandboxing component.
    - CVE-2026-12312: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12313: Information disclosure, sandbox escape in the Security: Process Sandboxing component.
    - CVE-2026-12314: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12315: Mitigation bypass in the DOM: Security component.
    - CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL component.
    - CVE-2026-12325: Denial-of-service in the Graphics: ImageLib component.
    - CVE-2026-12327: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and     Thunderbird       152.
    - CVE-2026-12328: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR     140.12, Firefox       152 and Thunderbird 152.
    - CVE-2026-12329: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12330: Incorrect boundary conditions in the Internationalization component.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101346 advisory.

    Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12,     Thunderbird 152, and Thunderbird 140.12.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of firefox installed on the remote host is prior to 140.12.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2026-062 advisory.

    Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152,     Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12289)

    Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12290)

    Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12291)

    Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152,     Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12292)

    Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12294)

    Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12295)

    Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152,     Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12296)

    Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was     fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
    (CVE-2026-12297)

    Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12298)

    JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox     ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12299)

    Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12302)

    Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox     152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12304)

    Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12305)

    Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12306)

    Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12307)

    Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12308)

    Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12309)

    Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12310)

    Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability     was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12311)

    Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12312)

    Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability     was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12313)

    Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12314)

    Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12315)

    Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in     Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12324)

    Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152,     Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12325)

    Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152,     Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. (CVE-2026-12327)

    Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151     and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with     enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed     in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
    (CVE-2026-12328)

    Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and     Thunderbird 140.12. (CVE-2026-12329)

    Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in     Firefox ESR 140.12, Firefox ESR 115.37, and Thunderbird 140.12. (CVE-2026-12330)

    libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse,     XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation.
    Thus, a use-after-free can occur, (CVE-2026-50219)

    libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers     in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219     situation). (CVE-2026-56131)

    In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold     backing array reallocation is mishandled when there is data-structure sharing across parsers.
    (CVE-2026-56132)

    A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw     in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around     guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds     write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can     influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a     denial of service (process crash) or potentially achieve code execution. (CVE-2026-56208)

    A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A     missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a     spatial_layer_id exceeding the configured number of layers. This causes an out-of-bounds heap read of     approximately 40,728 bytes when computing a layer context array index. An attacker who can influence SVC     encoder parameters in a network-facing service could exploit this for information disclosure (heap content     leak) or denial of service (segmentation fault from hitting unmapped memory). (CVE-2026-56210)

    A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation.
    Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an     attacker to supply crafted video frame pixels that overlap with internal encoder layer context structures.
    In fork-based video processing services, an attacker can use this to hijack the cyclic refresh map     pointer, brute-force the process base address via a crash oracle, and redirect control flow to achieve     arbitrary command execution. Exploitation requires the target service to use libaom with SVC encoding     enabled and accept attacker-supplied video frames. (CVE-2026-56211)

    libexpat before 2.8.2 has an integer overflow in storeAtts. (CVE-2026-56403)

    libexpat before 2.8.2 has an integer overflow in addBinding. (CVE-2026-56404)

    libexpat before 2.8.2 has an integer overflow in getAttributeId. (CVE-2026-56405)

    libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was     present in XML_Parse. (CVE-2026-56406)

    libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity     textLen. (CVE-2026-56407)

    libexpat before 2.8.2 has an integer overflow in copyString. (CVE-2026-56408)

    libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call     depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-     free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219. (CVE-2026-56412)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
322728	RockyLinux 8 : firefox (RLSA-2026:27717)	Nessus	Rocky Linux Local Security Checks	2026/6/25	2026/7/2	critical
323039	SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:2583-1)	Nessus	SuSE Local Security Checks	2026/6/26	2026/7/2	critical
323054	AlmaLinux 9 : thunderbird (ALSA-2026:29940)	Nessus	Alma Linux Local Security Checks	2026/6/26	2026/7/1	critical
323954	AlmaLinux 8 : thunderbird (ALSA-2026:33445)	Nessus	Alma Linux Local Security Checks	2026/6/30	2026/6/30	critical
324624	Fedora 43 : thunderbird (2026-2fb5ca48a2)	Nessus	Fedora Local Security Checks	2026/7/1	2026/7/1	critical
324972	Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2026-168-03)	Nessus	Slackware Local Security Checks	2026/7/3	2026/7/6	critical
325074	RockyLinux 8 : thunderbird (RLSA-2026:33445)	Nessus	Rocky Linux Local Security Checks	2026/7/4	2026/7/4	critical
325463	RHEL 9 : firefox (RHSA-2026:36101)	Nessus	Red Hat Local Security Checks	2026/7/7	2026/7/7	critical
325464	RHEL 8 : firefox (RHSA-2026:36103)	Nessus	Red Hat Local Security Checks	2026/7/7	2026/7/7	critical
326465	RHEL 9 : thunderbird (RHSA-2026:38753)	Nessus	Red Hat Local Security Checks	2026/7/13	2026/7/13	critical
326699	SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2026:2852-1)	Nessus	SuSE Local Security Checks	2026/7/14	2026/7/14	critical
336235	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101346)	Nessus	Unity Linux Local Security Checks	2026/8/17	2026/8/17	medium
325581	Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2026-062 (ALASFIREFOX-2026-062)	Nessus	Amazon Linux Local Security Checks	2026/7/8	2026/7/8	medium

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

medium

medium