The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:8850 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

    * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4689)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

    * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)

    * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

    * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

    * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4690)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

    * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

    * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)

    * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

    * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)

    * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149     and Thunderbird 149 (CVE-2026-4720)

    * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

    * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

    * thunderbird: Out of bounds read in IMAP parsing (CVE-2026-4371)

    * thunderbird: Spoofing issue in Thunderbird (CVE-2026-3889)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-5931 advisory.

    [140.9.0-1.0.1]
    - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

    [140.9.0-1]
    - Update to 140.9.0 ESR

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149,     Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. (CVE-2026-4714)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:7841 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

    * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4689)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

    * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)

    * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

    * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

    * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4690)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

    * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

    * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)

    * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

    * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)

    * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149     and Thunderbird 149 (CVE-2026-4720)

    * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

    * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:7839 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

    * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4689)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

    * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)

    * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

    * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

    * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4690)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

    * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

    * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)

    * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

    * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)

    * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149     and Thunderbird 149 (CVE-2026-4720)

    * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

    * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:8290 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

    * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4689)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

    * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)

    * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

    * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

    * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4690)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

    * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

    * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)

    * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

    * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)

    * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149     and Thunderbird 149 (CVE-2026-4720)

    * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

    * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

    * thunderbird: Out of bounds read in IMAP parsing (CVE-2026-4371)

    * thunderbird: Spoofing issue in Thunderbird (CVE-2026-3889)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:8286 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

    * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4689)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

    * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)

    * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

    * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

    * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4690)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

    * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

    * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)

    * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

    * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)

    * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149     and Thunderbird 149 (CVE-2026-4720)

    * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

    * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

    * thunderbird: Out of bounds read in IMAP parsing (CVE-2026-4371)

    * thunderbird: Spoofing issue in Thunderbird (CVE-2026-3889)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:6917 advisory.

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird     ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
      * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
      * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4706)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the     XPCOM component (CVE-2026-4689)
      * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
      * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)
      * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)
      * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
      * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4685)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
      * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the     XPCOM component (CVE-2026-4690)
      * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4686)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
      * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
      * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)
      * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)
      * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
      * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
      * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)
      * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox     149 and Thunderbird 149 (CVE-2026-4720)
      * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4707)
      * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)
      * thunderbird: Out of bounds read in IMAP parsing (CVE-2026-4371)
      * thunderbird: Spoofing issue in Thunderbird (CVE-2026-3889)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:5932 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

    * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4689)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

    * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)

    * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

    * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

    * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4690)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

    * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

    * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)

    * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

    * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)

    * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149     and Thunderbird 149 (CVE-2026-4720)

    * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

    * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:5931 advisory.

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird     ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
      * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
      * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4706)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the     XPCOM component (CVE-2026-4689)
      * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
      * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)
      * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)
      * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
      * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4685)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
      * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the     XPCOM component (CVE-2026-4690)
      * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4686)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
      * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
      * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)
      * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)
      * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
      * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
      * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)
      * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox     149 and Thunderbird 149 (CVE-2026-4720)
      * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4707)
      * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 149.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-20 advisory.

  - Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability affects     Firefox < 149 and Thunderbird < 149. (CVE-2026-4725)

  - Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects Firefox <     149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.
    (CVE-2026-4684)

  - Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox <     149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.
    (CVE-2026-4685, CVE-2026-4686, CVE-2026-4706, CVE-2026-4707)

  - Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability affects     Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.
    (CVE-2026-4687)

  - Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability affects     Firefox < 149, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9. (CVE-2026-4688)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 149.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-23 advisory.

  - Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability affects     Firefox < 149 and Thunderbird < 149. (CVE-2026-4725)

  - Spoofing issue in Thunderbird. This vulnerability affects Thunderbird < 149 and Thunderbird < 140.9.
    (CVE-2026-3889)

  - A malicious mail server could send malformed strings with negative lengths, causing the parser to read     memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker     could cause the parser to malfunction, potentially crashing Thunderbird or leaking sensitive data.
    (CVE-2026-4371)

  - Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects Firefox <     149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.
    (CVE-2026-4684)

  - Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox <     149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.
    (CVE-2026-4685, CVE-2026-4686, CVE-2026-4706, CVE-2026-4707)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-49237e1ced advisory.

    Update NSS to 3.121.0     Update to Firefox 149.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6178 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6178-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     March 25, 2026                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : firefox-esr     CVE ID         : CVE-2025-59375 CVE-2026-4684 CVE-2026-4685 CVE-2026-4686                      CVE-2026-4687 CVE-2026-4688 CVE-2026-4689 CVE-2026-4690                      CVE-2026-4691 CVE-2026-4692 CVE-2026-4693 CVE-2026-4694                      CVE-2026-4695 CVE-2026-4696 CVE-2026-4697 CVE-2026-4698                      CVE-2026-4699 CVE-2026-4700 CVE-2026-4701 CVE-2026-4702                      CVE-2026-4704 CVE-2026-4705 CVE-2026-4706 CVE-2026-4707                      CVE-2026-4708 CVE-2026-4709 CVE-2026-4710 CVE-2026-4713                      CVE-2026-4714 CVE-2026-4715 CVE-2026-4716 CVE-2026-4717                      CVE-2026-4718 CVE-2026-4719 CVE-2026-4720 CVE-2026-4721

    Multiple security issues have been found in the Mozilla Firefox web     browser, which could potentially result in the execution of arbitrary     code, sandbox escape, information disclosure, denial of service or     privilege escalation.

    For the oldstable distribution (bookworm), these problems have been     fixed in version 140.9.0esr-1~deb12u1.

    For the stable distribution (trixie), these problems have been fixed in     version 140.9.0esr-1~deb13u1.

    We recommend that you upgrade your firefox-esr packages.

    For the detailed security status of firefox-esr please refer to its     security tracker page at:
    https://security-tracker.debian.org/tracker/firefox-esr

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-372:05 advisory.

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird     ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
      * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
      * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4706)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the     XPCOM component (CVE-2026-4689)
      * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
      * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)
      * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)
      * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
      * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4685)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
      * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the     XPCOM component (CVE-2026-4690)
      * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4686)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
      * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
      * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)
      * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)
      * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
      * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
      * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)
      * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox     149 and Thunderbird 149 (CVE-2026-4720)
      * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4707)
      * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:6342 advisory.

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird     ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
      * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
      * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4706)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the     XPCOM component (CVE-2026-4689)
      * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
      * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)
      * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)
      * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
      * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4685)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
      * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the     XPCOM component (CVE-2026-4690)
      * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4686)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
      * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
      * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)
      * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
      * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)
      * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
      * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
      * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)
      * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
      * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox     149 and Thunderbird 149 (CVE-2026-4720)
      * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
      * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component     (CVE-2026-4707)
      * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)
      * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)
      * thunderbird: Out of bounds read in IMAP parsing (CVE-2026-4371)
      * thunderbird: Spoofing issue in Thunderbird (CVE-2026-3889)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:6188 advisory.

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

    * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4689)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

    * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)

    * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

    * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

    * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4690)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

    * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

    * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)

    * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

    * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)

    * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149     and Thunderbird 149 (CVE-2026-4720)

    * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

    * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

    * thunderbird: Out of bounds read in IMAP parsing (CVE-2026-4371)

    * thunderbird: Spoofing issue in Thunderbird (CVE-2026-3889)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:6342 advisory.

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

    * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4689)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

    * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)

    * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

    * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

    * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4690)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

    * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

    * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)

    * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

    * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)

    * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149     and Thunderbird 149 (CVE-2026-4720)

    * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

    * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

    * thunderbird: Out of bounds read in IMAP parsing (CVE-2026-4371)

    * thunderbird: Spoofing issue in Thunderbird (CVE-2026-3889)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:7843 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR     140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

    * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

    * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component     (CVE-2026-4688)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4695)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4689)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

    * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine     component (CVE-2026-4716)

    * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component     (CVE-2026-4684)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

    * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

    * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component     (CVE-2026-4697)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM     component (CVE-2026-4690)

    * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

    * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

    * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component     (CVE-2026-4699)

    * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

    * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component     (CVE-2026-4693)

    * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

    * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

    * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component     (CVE-2026-4694)

    * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149     and Thunderbird 149 (CVE-2026-4720)

    * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

    * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

    * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

    * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component     (CVE-2026-4687)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
307578	RHEL 8 : thunderbird (RHSA-2026:8850)	Nessus	Red Hat Local Security Checks	2026/4/20	2026/4/20	critical
304149	Oracle Linux 10 : firefox (ELSA-2026-5931)	Nessus	Oracle Linux Local Security Checks	2026/3/28	2026/4/30	critical
303552	Linux Distros Unpatched Vulnerability : CVE-2026-4714	Nessus	Misc.	2026/3/25	2026/4/29	high
306104	RHEL 9 : firefox (RHSA-2026:7841)	Nessus	Red Hat Local Security Checks	2026/4/13	2026/4/13	critical
306112	RHEL 9 : firefox (RHSA-2026:7839)	Nessus	Red Hat Local Security Checks	2026/4/13	2026/4/13	critical
306512	RHEL 9 : thunderbird (RHSA-2026:8290)	Nessus	Red Hat Local Security Checks	2026/4/15	2026/4/15	critical
306513	RHEL 9 : thunderbird (RHSA-2026:8286)	Nessus	Red Hat Local Security Checks	2026/4/15	2026/4/15	critical
306652	AlmaLinux 8 : thunderbird (ALSA-2026:6917)	Nessus	Alma Linux Local Security Checks	2026/4/16	2026/4/16	critical
303805	RHEL 8 : firefox (RHSA-2026:5932)	Nessus	Red Hat Local Security Checks	2026/3/26	2026/3/26	critical
304314	AlmaLinux 10 : firefox (ALSA-2026:5931)	Nessus	Alma Linux Local Security Checks	2026/3/30	2026/3/30	critical
303471	Mozilla Firefox < 149.0	Nessus	MacOS X Local Security Checks	2026/3/24	2026/4/30	critical
303504	Mozilla Thunderbird < 149.0	Nessus	MacOS X Local Security Checks	2026/3/24	2026/4/30	critical
304408	Fedora 42 : firefox / nss (2026-49237e1ced)	Nessus	Fedora Local Security Checks	2026/3/31	2026/4/30	critical
303745	Debian dsa-6178 : firefox-esr - security update	Nessus	Debian Local Security Checks	2026/3/25	2026/3/26	critical
304477	MiracleLinux 9 : firefox-140.9.0-1.el9_7.ML.1 (AXSA:2026-372:05)	Nessus	Miracle Linux Local Security Checks	2026/4/1	2026/4/2	critical
304538	AlmaLinux 10 : thunderbird (ALSA-2026:6342)	Nessus	Alma Linux Local Security Checks	2026/4/1	2026/4/1	critical
305150	RockyLinux 9 : thunderbird (RLSA-2026:6188)	Nessus	Rocky Linux Local Security Checks	2026/4/7	2026/4/7	critical
305755	RockyLinux 10 : thunderbird (RLSA-2026:6342)	Nessus	Rocky Linux Local Security Checks	2026/4/9	2026/4/9	critical
306109	RHEL 10 : firefox (RHSA-2026:7843)	Nessus	Red Hat Local Security Checks	2026/4/13	2026/4/13	critical

检测

插件搜索

critical

critical

high

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical