RHSA-2026:53444: thunderbird Red Hat

CVSS: 8.8v3.1HighPublished

Published 12-08-2026Last modified 09-09-2026

Open JSON

Vulnerability summary

RHSA-2026:53444 is a high (CVSS 8.8) vulnerability in thunderbird Red Hat.

Overall risk

35/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.8/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

12-08-2026
PublishedVulnerability first disclosed.
09-09-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: thunderbird security update

CVSS metrics

1 score · 1 source · 1 version

v3.18.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat3 products

thunderbird< 0:140.13.0-1.el9_4
thunderbird-debuginfo< 0:140.13.0-1.el9_4
thunderbird-debugsource< 0:140.13.0-1.el9_4

1 vendor · 3 products

References

202 links

Show all 100 references

bugzilla.redhat.com/show_bug.cgi?id=2503432REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503434REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503439REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503440REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503444REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503451REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503454REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503456REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503463REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503472REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503473REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503485REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503489REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503491REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503497REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503498REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503500REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503501REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503505REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503512REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503513REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503517REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503521REPORT
bugzilla.redhat.com/show_bug.cgi?id=2503527REPORT
bugzilla.redhat.com/show_bug.cgi?id=2506217REPORT
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53444.jsonAdvisory
access.redhat.com/security/cve/CVE-2026-14899REPORT
www.cve.org/CVERecord?id=CVE-2026-14899Advisory
nvd.nist.gov/vuln/detail/CVE-2026-14899Advisory
www.mozilla.org/security/advisories/mfsa2026-72/ARTICLE
access.redhat.com/security/cve/CVE-2026-15718REPORT
www.cve.org/CVERecord?id=CVE-2026-15718Advisory
nvd.nist.gov/vuln/detail/CVE-2026-15718Advisory
www.mozilla.org/security/advisories/mfsa2026-70/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-72/ARTICLE
access.redhat.com/security/cve/CVE-2026-15719REPORT
www.cve.org/CVERecord?id=CVE-2026-15719Advisory
nvd.nist.gov/vuln/detail/CVE-2026-15719Advisory
www.mozilla.org/security/advisories/mfsa2026-70/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-72/ARTICLE
access.redhat.com/security/cve/CVE-2026-16349REPORT
www.cve.org/CVERecord?id=CVE-2026-16349Advisory
nvd.nist.gov/vuln/detail/CVE-2026-16349Advisory
www.mozilla.org/security/advisories/mfsa2026-70/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-72/ARTICLE
access.redhat.com/security/cve/CVE-2026-16350REPORT
www.cve.org/CVERecord?id=CVE-2026-16350Advisory
nvd.nist.gov/vuln/detail/CVE-2026-16350Advisory
www.mozilla.org/security/advisories/mfsa2026-70/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-72/ARTICLE
access.redhat.com/security/cve/CVE-2026-16351REPORT
www.cve.org/CVERecord?id=CVE-2026-16351Advisory
nvd.nist.gov/vuln/detail/CVE-2026-16351Advisory
www.mozilla.org/security/advisories/mfsa2026-70/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-72/ARTICLE
access.redhat.com/security/cve/CVE-2026-16352REPORT
www.cve.org/CVERecord?id=CVE-2026-16352Advisory
nvd.nist.gov/vuln/detail/CVE-2026-16352Advisory
www.mozilla.org/security/advisories/mfsa2026-70/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-72/ARTICLE
access.redhat.com/security/cve/CVE-2026-16353REPORT
www.cve.org/CVERecord?id=CVE-2026-16353Advisory
nvd.nist.gov/vuln/detail/CVE-2026-16353Advisory
www.mozilla.org/security/advisories/mfsa2026-70/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-72/ARTICLE
access.redhat.com/security/cve/CVE-2026-16354REPORT
www.cve.org/CVERecord?id=CVE-2026-16354Advisory
nvd.nist.gov/vuln/detail/CVE-2026-16354Advisory
www.mozilla.org/security/advisories/mfsa2026-70/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-72/ARTICLE
access.redhat.com/security/cve/CVE-2026-16355REPORT
www.cve.org/CVERecord?id=CVE-2026-16355Advisory
nvd.nist.gov/vuln/detail/CVE-2026-16355Advisory
www.mozilla.org/security/advisories/mfsa2026-70/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-72/ARTICLE
access.redhat.com/security/cve/CVE-2026-16356REPORT
www.cve.org/CVERecord?id=CVE-2026-16356Advisory
nvd.nist.gov/vuln/detail/CVE-2026-16356Advisory
www.mozilla.org/security/advisories/mfsa2026-70/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-72/ARTICLE
access.redhat.com/security/cve/CVE-2026-16357REPORT
www.cve.org/CVERecord?id=CVE-2026-16357Advisory
nvd.nist.gov/vuln/detail/CVE-2026-16357Advisory
www.mozilla.org/security/advisories/mfsa2026-70/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-72/ARTICLE
access.redhat.com/security/cve/CVE-2026-16358REPORT
www.cve.org/CVERecord?id=CVE-2026-16358Advisory
nvd.nist.gov/vuln/detail/CVE-2026-16358Advisory
www.mozilla.org/security/advisories/mfsa2026-70/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-72/ARTICLE

Showing 100 of 202. Use Open JSON for the complete list.