The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6350 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6350-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     June 17, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : firefox-esr     CVE ID         : CVE-2026-12289 CVE-2026-12290 CVE-2026-12291 CVE-2026-12292                      CVE-2026-12294 CVE-2026-12295 CVE-2026-12296 CVE-2026-12297                      CVE-2026-12298 CVE-2026-12299 CVE-2026-12302 CVE-2026-12304                      CVE-2026-12305 CVE-2026-12306 CVE-2026-12307 CVE-2026-12308                      CVE-2026-12309 CVE-2026-12310 CVE-2026-12311 CVE-2026-12312                      CVE-2026-12313 CVE-2026-12314 CVE-2026-12315 CVE-2026-12324                      CVE-2026-12325 CVE-2026-12327 CVE-2026-12328 CVE-2026-12329                      CVE-2026-12330

    Multiple security issues have been found in the Mozilla Firefox web     browser, which could potentially result in the execution of arbitrary     code, bypass of the same-origin policy, privilege escalation,     information disclosure, spoofing or sandbox escape.

    For the stable distribution (trixie), these problems have been fixed in     version 140.12.0esr-1~deb13u1.

    We recommend that you upgrade your firefox-esr packages.

    For the detailed security status of firefox-esr please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/firefox-esr

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of mozilla-thunderbird installed on the remote host is prior to 140.12.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-168-04 advisory.

    New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the mozilla-thunderbird security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:27717 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12313)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12311)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox     152 and Thunderbird 152 (CVE-2026-12327)

    * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird     ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

    * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component     (CVE-2026-12330)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

    * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

    * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

    * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

    * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component     (CVE-2026-12297)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

    * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-12324)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

    * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

    * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:27733 advisory.

    * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12313)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12311)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox     152 and Thunderbird 152 (CVE-2026-12327)

    * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird     ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

    * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component     (CVE-2026-12330)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

    * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

    * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

    * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

    * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component     (CVE-2026-12297)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

    * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-12324)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

    * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

    * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-27734 advisory.

    [140.12.0-1.0.1]
    - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

    [140.12.0]
    - Add debranding patches (Mustafa Gezen)
    - Add OpenELA default preferences (Louis Abel)

    [140.12.0-1]
    - Update to 140.12.0 ESR

    [140.11.0-1]
    - Update to 140.11.0 ESR

    [140.10.2-1]
    - Update to 140.10.2 ESR

    [140.10.1-1]
    - Update to 140.10.1 ESR

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:29940 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12313)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12311)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox     152 and Thunderbird 152 (CVE-2026-12327)

    * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird     ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

    * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component     (CVE-2026-12330)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

    * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

    * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

    * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

    * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component     (CVE-2026-12297)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

    * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-12324)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

    * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

    * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:29940 advisory.

    * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12313)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12311)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox     152 and Thunderbird 152 (CVE-2026-12327)

    * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird     ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

    * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component     (CVE-2026-12330)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

    * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

    * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

    * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

    * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component     (CVE-2026-12297)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

    * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-12324)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

    * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

    * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2582-1 advisory.

    Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071):

    - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component.
    - CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12291: Use-after-free in the Networking: HTTP component.
    - CVE-2026-12292: Incorrect boundary conditions in the Web Audio component.
    - CVE-2026-12294: Sandbox escape in the DOM: Workers component.
    - CVE-2026-12295: Sandbox escape in the DOM: Navigation component.
    - CVE-2026-12296: Sandbox escape in the Security: Process Sandboxing component.
    - CVE-2026-12297: Sandbox escape due to incorrect boundary conditions in the Networking component.
    - CVE-2026-12298: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12299: JIT miscompilation in the DOM: Core & HTML component.
    - CVE-2026-12302: Mitigation bypass in the DOM: Security component.
    - CVE-2026-12304: Same-origin policy bypass in the Networking: Cookies component.
    - CVE-2026-12305: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12306: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12307: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12308: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12309: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12310: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12311: Information disclosure, sandbox escape in the Security: Process Sandboxing component.
    - CVE-2026-12312: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12313: Information disclosure, sandbox escape in the Security: Process Sandboxing component.
    - CVE-2026-12314: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12315: Mitigation bypass in the DOM: Security component.
    - CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL component.
    - CVE-2026-12325: Denial-of-service in the Graphics: ImageLib component.
    - CVE-2026-12327: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and     Thunderbird       152.
    - CVE-2026-12328: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR     140.12, Firefox       152 and Thunderbird 152.
    - CVE-2026-12329: Memory safety bug fixed in Firefox ESR 140.12.
    - CVE-2026-12330: Incorrect boundary conditions in the Internationalization component.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21168-1 advisory.

    Changes in MozillaThunderbird:

    - Mozilla Thunderbird 140.12.0 ESR       MFSA 2026-61 (bsc#1268071)
      * CVE-2026-12289 (bmo#2023443)         Privilege escalation in the Graphics: WebRender component
      * CVE-2026-12290 (bmo#2024852)         Memory safety bug fixed in Thunderbird ESR 140.12
      * CVE-2026-12291 (bmo#2036929)         Use-after-free in the Networking: HTTP component
      * CVE-2026-12292 (bmo#2038465)         Incorrect boundary conditions in the Web Audio component
      * CVE-2026-12294 (bmo#2039873)         Sandbox escape in the DOM: Workers component
      * CVE-2026-12295 (bmo#2040160)         Sandbox escape in the DOM: Navigation component
      * CVE-2026-12298 (bmo#2041981)         Memory safety bug fixed in Thunderbird ESR 140.12
      * CVE-2026-12296 (bmo#2040515)         Sandbox escape in the Security: Process Sandboxing component
      * CVE-2026-12297 (bmo#2041610)         Sandbox escape due to incorrect boundary conditions in the         Networking component
      * CVE-2026-12299 (bmo#2043139)         JIT miscompilation in the DOM: Core & HTML component
      * CVE-2026-12329 (bmo#2044738)         Memory safety bug fixed in Thunderbird ESR 140.12
      * CVE-2026-12302 (bmo#2034489)         Mitigation bypass in the DOM: Security component
      * CVE-2026-12304 (bmo#2034944)         Same-origin policy bypass in the Networking: Cookies component
      * CVE-2026-12305 (bmo#2037290)         Memory safety bug fixed in Thunderbird ESR 140.12
      * CVE-2026-12306 (bmo#2037323)         Memory safety bug fixed in Thunderbird ESR 140.12
      * CVE-2026-12307 (bmo#2038133)         Memory safety bug fixed in Thunderbird ESR 140.12
      * CVE-2026-12308 (bmo#2038302)         Memory safety bug fixed in Thunderbird ESR 140.12
      * CVE-2026-12309 (bmo#2038476)         Memory safety bug fixed in Thunderbird ESR 140.12
      * CVE-2026-12310 (bmo#2039707)         Memory safety bug fixed in Thunderbird ESR 140.12
      * CVE-2026-12311 (bmo#2040177)         Information disclosure, sandbox escape in the Security:
        Process Sandboxing component
      * CVE-2026-12312 (bmo#2040383)         Memory safety bug fixed in Thunderbird ESR 140.12
      * CVE-2026-12313 (bmo#2040477)         Information disclosure, sandbox escape in the Security:
        Process Sandboxing component
      * CVE-2026-12314 (bmo#2041856)         Memory safety bug fixed in Thunderbird ESR 140.12
      * CVE-2026-12315 (bmo#2042058)         Mitigation bypass in the DOM: Security component
      * CVE-2026-12330 (bmo#2029326)         Incorrect boundary conditions in the Internationalization         component
      * CVE-2026-12324 (bmo#2038444)         Incorrect boundary conditions in the Graphics: CanvasWebGL         component
      * CVE-2026-12325 (bmo#2039443)         Denial-of-service in the Graphics: ImageLib component
      * CVE-2026-12327 (bmo#2011842, bmo#2023902, bmo#2025512, bmo#2027312,         bmo#2029444, bmo#2036571, bmo#2036900, bmo#2036936, bmo#2037995,         bmo#2038551, bmo#2040717, bmo#2042724)         Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird         ESR 140.12, Firefox 152 and Thunderbird 152
      * CVE-2026-12328 (bmo#2029402, bmo#2038477, bmo#2039726, bmo#2041373,         bmo#2042268, bmo#2042451, bmo#2042782, bmo#2042858, bmo#2042929,         bmo#2042965, bmo#2043213)         Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR         140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152

    - Mozilla Thunderbird 140.11.0 ESR       MFSA 2026-51 (bsc#1265212)
      * CVE-2026-8946 (bmo#2029070)         Incorrect boundary conditions in the Audio/Video: Web Codecs         component
      * CVE-2026-8388 (bmo#2036978)         Incorrect boundary conditions in the JavaScript Engine: JIT         component
      * CVE-2026-8947 (bmo#2038439)         Use-after-free in the DOM: Bindings (WebIDL) component
      * CVE-2026-8391 (bmo#2038575)         Other issue in the JavaScript Engine component
      * CVE-2026-8401 (bmo#2038679)         Sandbox escape in the Profile Backup component
      * CVE-2026-8949 (bmo#1355639)         Integer overflow in the Widget: Win32 component
      * CVE-2026-8950 (bmo#1965430)         Same-origin policy bypass in the Networking: HTTP component
      * CVE-2026-8953 (bmo#2029511)         Sandbox escape due to use-after-free in the Disability Access         APIs component
      * CVE-2026-8954 (bmo#2030747)         Incorrect boundary conditions, integer overflow in the         Audio/Video component
      * CVE-2026-8955 (bmo#2031064)         Privilege escalation in the DOM: Workers component
      * CVE-2026-8956 (bmo#2032427)         Integer overflow in the Networking: JAR component
      * CVE-2026-8957 (bmo#2033850)         Privilege escalation in the Enterprise Policies component
      * CVE-2026-8958 (bmo#2034713)         Information disclosure, sandbox escape in the Security:
        Process Sandboxing component
      * CVE-2026-8959 (bmo#2034754)         Sandbox escape due to incorrect boundary conditions in the         Widget: Win32 component
      * CVE-2026-8961 (bmo#1962625)         Spoofing issue in the Form Autofill component
      * CVE-2026-8962 (bmo#2004804)         Mitigation bypass in the DOM: Security component
      * CVE-2026-8968 (bmo#2030467)         Denial-of-service due to invalid pointer in the Audio/Video:
        Web Codecs component
      * CVE-2026-8970 (bmo#2032174)         Privilege escalation in the Security component
      * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677, bmo#2022390,         bmo#2023116, bmo#2023657, bmo#2024255, bmo#2024418, bmo#2024441,         bmo#2024447, bmo#2024966, bmo#2025412, bmo#2025467, bmo#2025940,         bmo#2025950, bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,         bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332, bmo#2027333,         bmo#2028266, bmo#2028292, bmo#2028319, bmo#2028526, bmo#2028870,         bmo#2028876, bmo#2028882, bmo#2029062, bmo#2029309, bmo#2029414,         bmo#2029422, bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,         bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028, bmo#2031457,         bmo#2032039, bmo#2033610, bmo#2033854, bmo#2034498, bmo#2034628,         bmo#2034978, bmo#2035966, bmo#2036668, bmo#2036905, bmo#2036930)         Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151
      * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429, bmo#2029910,         bmo#2035915, bmo#2038669, bmo#2038678)         Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151

    - Mozilla Thunderbird 140.10.2       MFSA 2026-44 (bsc#1264378)
      * CVE-2026-8090 (bmo#2034352)         Use-after-free in the DOM: Networking component
      * CVE-2026-8094 (bmo#2035939)         Other issue in the WebRTC component
      * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576, bmo#2022722,         bmo#2024439, bmo#2027883, bmo#2029463, bmo#2030323, bmo#2032042,         bmo#2032043, bmo#2033270, bmo#2033637, bmo#2034422, bmo#2034496,         bmo#2035879, bmo#2036516)         Memory safety bugs fixed in Thunderbird ESR 140.10.2 and         Thunderbird 150.0.2

    - Mozilla Thunderbird 140.10.1 ESR       MFSA 2026-39 (bsc#1263110)
      * CVE-2026-7320 (bmo#2027433)         Information disclosure due to incorrect boundary conditions         in the Audio/Video component
      * CVE-2026-7321 (bmo#2029461)         Sandbox escape due to incorrect boundary conditions in the         WebRTC: Networking component
      * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,         bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,         bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,         bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,         bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)         Memory safety bugs fixed in Thunderbird ESR 140.10.1 and         Thunderbird 150.0.1
      * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,         bmo#2033602)         Memory safety bugs fixed in Thunderbird ESR 140.10.1 and         Thunderbird 150.0.1

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-33445 advisory.

    [140.12.0-1.0.1]
    - Fix prefs for new nss [Orabug: 37079820]
    - Add Oracle prefs file

    [140.12.0]
    - Add OpenELA debranding

    [140.12.0-1]
    - Update to 140.12.0 ESR

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0595 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2026-12289:
    Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152,     Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12290:
    Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12,     Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12291:
    Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12292:
    Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152,     Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12294:
    Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12295:
    Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12296:
    Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152,     Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12297:
    Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was     fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12298:
    Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12,     Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12299:
    JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox     ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12302:
    Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12304:
    Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox     152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12305:
    Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12,     Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12306:
    Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12,     Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12307:
    Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12,     Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12308:
    Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12,     Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12309:
    Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12,     Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12310:
    Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12,     Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12311:
    Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability     was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12312:
    Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12,     Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12313:
    Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability     was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12314:
    Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12,     Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12315:
    Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR     140.12, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12324:
    Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in     Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12325:
    Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152,     Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12327:
    Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152,     Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12328:
    Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151     and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with     enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed     in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

    CVE-2026-12329:
    Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and     Thunderbird 140.12.

    CVE-2026-12330:
    Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in     Firefox ESR 140.12, Firefox ESR 115.37, and Thunderbird 140.12.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:39141 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12313)

    * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12311)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox     152 and Thunderbird 152 (CVE-2026-12327)

    * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird     ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

    * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component     (CVE-2026-12330)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

    * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

    * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

    * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

    * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

    * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component     (CVE-2026-12297)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

    * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

    * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-12324)

    * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

    * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

    * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1431:17 advisory.

    * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)
      * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12313)
      * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing     component (CVE-2026-12311)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox     152 and Thunderbird 152 (CVE-2026-12327)
      * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)
      * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird     ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)
      * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component     (CVE-2026-12330)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)
      * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)
      * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)
      * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)
      * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)
      * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component     (CVE-2026-12297)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)
      * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)
      * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-12324)
      * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)
      * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)
      * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
321490	Debian dsa-6350 : firefox-esr - security update	Nessus	Debian Local Security Checks	2026/6/18	2026/7/3	critical
321545	Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2026-168-04)	Nessus	Slackware Local Security Checks	2026/6/19	2026/7/3	critical
321909	RHEL 8 : firefox (RHSA-2026:27717)	Nessus	Red Hat Local Security Checks	2026/6/22	2026/7/3	critical
322385	RockyLinux 10 : firefox (RLSA-2026:27733)	Nessus	Rocky Linux Local Security Checks	2026/6/24	2026/7/2	critical
322800	Oracle Linux 9 : firefox (ELSA-2026-27734)	Nessus	Oracle Linux Local Security Checks	2026/6/25	2026/7/2	critical
322814	RHEL 9 : thunderbird (RHSA-2026:29940)	Nessus	Red Hat Local Security Checks	2026/6/25	2026/7/2	critical
322956	RockyLinux 9 : thunderbird (RLSA-2026:29940)	Nessus	Rocky Linux Local Security Checks	2026/6/26	2026/7/2	critical
323075	SUSE SLED15: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:2582-1)	Nessus	SuSE Local Security Checks	2026/6/26	2026/7/1	critical
324059	openSUSE 16: MozillaThunderbird / MozillaThunderbird-openpgp-librnp / etc (openSUSE-SU-2026:21168-1)	Nessus	SuSE Local Security Checks	2026/7/1	2026/7/1	critical
324342	Oracle Linux 8 : thunderbird (ELSA-2026-33445)	Nessus	Oracle Linux Local Security Checks	2026/7/1	2026/7/1	critical
324636	TencentOS Server 3: firefox (TSSA-2026:0595)	Nessus	Tencent Local Security Checks	2026/7/2	2026/7/2	critical
326733	RHEL 8 : thunderbird (RHSA-2026:39141)	Nessus	Red Hat Local Security Checks	2026/7/14	2026/7/14	critical
331859	MiracleLinux 9 : thunderbird-140.12.0-1.el9_8.ML.1 (AXSA:2026-1431:17)	Nessus	Miracle Linux Local Security Checks	2026/8/4	2026/8/4	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical