MGASA-2026-0243: thunderbird Mageia

CVSS: UnknownPublished
Published 13-07-2026Last modified 13-07-2026
Open JSON

Vulnerability summary

MGASA-2026-0243 is a vulnerability in thunderbird Mageia with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 31 · Downstream 0
CVE-2026-12289CVE-2026-12290CVE-2026-12291CVE-2026-12292CVE-2026-12294CVE-2026-12295

Timeline

  1. 13-07-2026
    PublishedVulnerability first disclosed.
  2. 13-07-2026
    Last modifiedVulnerability information updated.

Description

Updated thunderbird thunderbird-l10n packages fix security vulnerabilities The updated packages fix security vulnerabilities: Privilege escalation in the Graphics: WebRender component. (CVE-2026-12289) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12290) Use-after-free in the Networking: HTTP component. (CVE-2026-12291) Incorrect boundary conditions in the Web Audio component. (CVE-2026-12292) Sandbox escape in the DOM: Workers component. (CVE-2026-12294) Sandbox escape in the DOM: Navigation component. (CVE-2026-12295) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12298) Sandbox escape in the Security: Process Sandboxing component. (CVE-2026-12296) Sandbox escape due to incorrect boundary conditions in the Networking component. (CVE-2026-12297) JIT miscompilation in the DOM: Core & HTML component. (CVE-2026-12299) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12329) Mitigation bypass in the DOM: Security component. (CVE-2026-12302) Same-origin policy bypass in the Networking: Cookies component. (CVE-2026-12304) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12305) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12306) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12307) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12308) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12309) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12310) Information disclosure, sandbox escape in the Security: Process Sandboxing component. (CVE-2026-12311) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12312) Information disclosure, sandbox escape in the Security: Process Sandboxing component. (CVE-2026-12313) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12314) Mitigation bypass in the DOM: Security component. (CVE-2026-12315) Incorrect boundary conditions in the Internationalization component. (CVE-2026-12330) Incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-12324) Denial-of-service in the Graphics: ImageLib component. (CVE-2026-12325) Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152. (CVE-2026-12327) Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152. (CVE-2026-12328) Denial-of-service via malicious LDAP address-book server. (CVE-2026-57962) Chat UI manipulation by injection. (CVE-2026-57963)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mageia4 products
  • thunderbird< 140.12.1-1.mga10
  • thunderbird-l10n< 140.12.1-1.mga10
  • thunderbird< 140.12.1-1.mga9
  • thunderbird-l10n< 140.12.1-1.mga9

1 vendor · 4 products

References

6 links