RHSA-2026:38751: thunderbird Red Hat

CVSS: 7.5v3.1HighPublished

Published 14-07-2026Last modified 16-07-2026

Open JSON

Vulnerability summary

RHSA-2026:38751 is a high (CVSS 7.5) vulnerability in thunderbird Red Hat.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

14-07-2026
PublishedVulnerability first disclosed.
16-07-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: thunderbird security update

CVSS metrics

1 score · 1 source · 1 version

v3.17.5

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat3 products

thunderbird< 0:140.12.0-1.el10_0
thunderbird-debuginfo< 0:140.12.0-1.el10_0
thunderbird-debugsource< 0:140.12.0-1.el10_0

1 vendor · 3 products

References

177 links

Show all 100 references

bugzilla.redhat.com/show_bug.cgi?id=2489217REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489218REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489220REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489221REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489223REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489224REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489225REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489226REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489229REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489231REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489232REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489233REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489234REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489235REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489236REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489237REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489239REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489240REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489243REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489244REPORT
bugzilla.redhat.com/show_bug.cgi?id=2489248REPORT
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_38751.jsonAdvisory
access.redhat.com/security/cve/CVE-2026-12289REPORT
www.cve.org/CVERecord?id=CVE-2026-12289Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12289Advisory
www.mozilla.org/security/advisories/mfsa2026-58/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-61/ARTICLE
access.redhat.com/security/cve/CVE-2026-12290REPORT
www.cve.org/CVERecord?id=CVE-2026-12290Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12290Advisory
www.mozilla.org/security/advisories/mfsa2026-58/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-61/ARTICLE
access.redhat.com/security/cve/CVE-2026-12291REPORT
www.cve.org/CVERecord?id=CVE-2026-12291Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12291Advisory
www.mozilla.org/security/advisories/mfsa2026-58/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-61/ARTICLE
access.redhat.com/security/cve/CVE-2026-12292REPORT
www.cve.org/CVERecord?id=CVE-2026-12292Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12292Advisory
www.mozilla.org/security/advisories/mfsa2026-58/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-61/ARTICLE
access.redhat.com/security/cve/CVE-2026-12294REPORT
www.cve.org/CVERecord?id=CVE-2026-12294Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12294Advisory
www.mozilla.org/security/advisories/mfsa2026-58/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-61/ARTICLE
access.redhat.com/security/cve/CVE-2026-12295REPORT
www.cve.org/CVERecord?id=CVE-2026-12295Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12295Advisory
www.mozilla.org/security/advisories/mfsa2026-58/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-61/ARTICLE
access.redhat.com/security/cve/CVE-2026-12296REPORT
www.cve.org/CVERecord?id=CVE-2026-12296Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12296Advisory
www.mozilla.org/security/advisories/mfsa2026-58/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-61/ARTICLE
access.redhat.com/security/cve/CVE-2026-12297REPORT
www.cve.org/CVERecord?id=CVE-2026-12297Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12297Advisory
www.mozilla.org/security/advisories/mfsa2026-58/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-61/ARTICLE
access.redhat.com/security/cve/CVE-2026-12298REPORT
www.cve.org/CVERecord?id=CVE-2026-12298Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12298Advisory
www.mozilla.org/security/advisories/mfsa2026-58/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-61/ARTICLE
access.redhat.com/security/cve/CVE-2026-12299REPORT
www.cve.org/CVERecord?id=CVE-2026-12299Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12299Advisory
www.mozilla.org/security/advisories/mfsa2026-58/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-61/ARTICLE
access.redhat.com/security/cve/CVE-2026-12302REPORT
www.cve.org/CVERecord?id=CVE-2026-12302Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12302Advisory
www.mozilla.org/security/advisories/mfsa2026-58/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-61/ARTICLE
access.redhat.com/security/cve/CVE-2026-12304REPORT
www.cve.org/CVERecord?id=CVE-2026-12304Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12304Advisory
www.mozilla.org/security/advisories/mfsa2026-58/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-61/ARTICLE
access.redhat.com/security/cve/CVE-2026-12305REPORT
www.cve.org/CVERecord?id=CVE-2026-12305Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12305Advisory
www.mozilla.org/security/advisories/mfsa2026-58/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-61/ARTICLE
access.redhat.com/security/cve/CVE-2026-12306REPORT
www.cve.org/CVERecord?id=CVE-2026-12306Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12306Advisory

Showing 100 of 177. Use Open JSON for the complete list.