RHSA-2026:81394: thunderbird Red Hat

CVSS: 7.5v3.1HighPublished

Published 14-10-2026Last modified 16-10-2026

Open JSON

Vulnerability summary

RHSA-2026:81394 is a high (CVSS 7.5) vulnerability in thunderbird Red Hat.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

14-10-2026
PublishedVulnerability first disclosed.
16-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: thunderbird security update

CVSS metrics

1 score · 1 source · 1 version

v3.17.5

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat3 products

thunderbird< 0:140.16.0-1.el9_2
thunderbird-debuginfo< 0:140.16.0-1.el9_2
thunderbird-debugsource< 0:140.16.0-1.el9_2

1 vendor · 3 products

References

186 links

Show all 100 references

bugzilla.redhat.com/show_bug.cgi?id=2533757REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533758REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533760REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533762REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533764REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533769REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533770REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533771REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533773REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533774REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533778REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533779REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533781REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533786REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533790REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533791REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533792REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533793REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533797REPORT
bugzilla.redhat.com/show_bug.cgi?id=2533799REPORT
bugzilla.redhat.com/show_bug.cgi?id=2534187REPORT
bugzilla.redhat.com/show_bug.cgi?id=2534197REPORT
bugzilla.redhat.com/show_bug.cgi?id=2534199REPORT
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_81394.jsonAdvisory
access.redhat.com/security/cve/CVE-2026-92005REPORT
www.cve.org/CVERecord?id=CVE-2026-92005Advisory
nvd.nist.gov/vuln/detail/CVE-2026-92005Advisory
www.mozilla.org/security/advisories/mfsa2026-92/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-95/ARTICLE
access.redhat.com/security/cve/CVE-2026-92006REPORT
www.cve.org/CVERecord?id=CVE-2026-92006Advisory
nvd.nist.gov/vuln/detail/CVE-2026-92006Advisory
www.mozilla.org/security/advisories/mfsa2026-92/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-95/ARTICLE
access.redhat.com/security/cve/CVE-2026-92007REPORT
www.cve.org/CVERecord?id=CVE-2026-92007Advisory
nvd.nist.gov/vuln/detail/CVE-2026-92007Advisory
www.mozilla.org/security/advisories/mfsa2026-92/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-95/ARTICLE
access.redhat.com/security/cve/CVE-2026-92008REPORT
www.cve.org/CVERecord?id=CVE-2026-92008Advisory
nvd.nist.gov/vuln/detail/CVE-2026-92008Advisory
www.mozilla.org/security/advisories/mfsa2026-92/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-95/ARTICLE
access.redhat.com/security/cve/CVE-2026-92009REPORT
www.cve.org/CVERecord?id=CVE-2026-92009Advisory
nvd.nist.gov/vuln/detail/CVE-2026-92009Advisory
www.mozilla.org/security/advisories/mfsa2026-92/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-95/ARTICLE
access.redhat.com/security/cve/CVE-2026-92010REPORT
www.cve.org/CVERecord?id=CVE-2026-92010Advisory
nvd.nist.gov/vuln/detail/CVE-2026-92010Advisory
www.mozilla.org/security/advisories/mfsa2026-92/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-95/ARTICLE
access.redhat.com/security/cve/CVE-2026-92011REPORT
www.cve.org/CVERecord?id=CVE-2026-92011Advisory
nvd.nist.gov/vuln/detail/CVE-2026-92011Advisory
www.mozilla.org/security/advisories/mfsa2026-92/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-95/ARTICLE
access.redhat.com/security/cve/CVE-2026-92012REPORT
www.cve.org/CVERecord?id=CVE-2026-92012Advisory
nvd.nist.gov/vuln/detail/CVE-2026-92012Advisory
www.mozilla.org/security/advisories/mfsa2026-92/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-95/ARTICLE
access.redhat.com/security/cve/CVE-2026-92013REPORT
www.cve.org/CVERecord?id=CVE-2026-92013Advisory
nvd.nist.gov/vuln/detail/CVE-2026-92013Advisory
www.mozilla.org/security/advisories/mfsa2026-92/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-95/ARTICLE
access.redhat.com/security/cve/CVE-2026-92014REPORT
www.cve.org/CVERecord?id=CVE-2026-92014Advisory
nvd.nist.gov/vuln/detail/CVE-2026-92014Advisory
www.mozilla.org/security/advisories/mfsa2026-92/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-95/ARTICLE
access.redhat.com/security/cve/CVE-2026-92015REPORT
www.cve.org/CVERecord?id=CVE-2026-92015Advisory
nvd.nist.gov/vuln/detail/CVE-2026-92015Advisory
www.mozilla.org/security/advisories/mfsa2026-92/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-95/ARTICLE
access.redhat.com/security/cve/CVE-2026-92016REPORT
www.cve.org/CVERecord?id=CVE-2026-92016Advisory
nvd.nist.gov/vuln/detail/CVE-2026-92016Advisory
www.mozilla.org/security/advisories/mfsa2026-92/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-95/ARTICLE
access.redhat.com/security/cve/CVE-2026-92017REPORT
www.cve.org/CVERecord?id=CVE-2026-92017Advisory
nvd.nist.gov/vuln/detail/CVE-2026-92017Advisory
www.mozilla.org/security/advisories/mfsa2026-92/ARTICLE
www.mozilla.org/security/advisories/mfsa2026-95/ARTICLE
access.redhat.com/security/cve/CVE-2026-92018REPORT

Showing 100 of 186. Use Open JSON for the complete list.