Important: thunderbird security update

{
  "id": "2329ed72d89825941ec60d802f9bdc493ae5d6d986c71c480ad1f63d02a85c3b",
  "url": "https://osv.dev/vulnerability/RLSA-2026%3A80694",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Important: thunderbird security update",
    "summary": "Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832) * firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784) * firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794) * firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820) * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777) * firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766) * firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779) * firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807) * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792) * firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819) * firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776) * firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757) * firefox: Sandbox escape due to use-after-free",
    "evidence": "osv:RLSA-2026:80694",
    "products": [
      {
        "name": {
          "value": "thunderbird",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:140.17.0-1.el9_8",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "RLSA-2026:80694",
      "aliases": [
        "RLSA-2026:80694"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:140.17.0-1.el9_8"
                }
              ],
              "database_specific": {
                "yum_repository": "AppStream"
              }
            }
          ],
          "package": {
            "name": "thunderbird",
            "purl": "pkg:rpm/rocky-linux/thunderbird?distro=rocky-linux-9&epoch=0",
            "ecosystem": "Rocky Linux:9"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/resf-osv-data/RLSA-2026:80694.json"
          }
        }
      ],
      "modified": "2026-10-24T00:30:02.727659621Z",
      "provider": "osv",
      "upstream": [
        "CVE-2026-100756",
        "CVE-2026-100757",
        "CVE-2026-100758",
        "CVE-2026-100759",
        "CVE-2026-100762",
        "CVE-2026-100766",
        "CVE-2026-100767",
        "CVE-2026-100769",
        "CVE-2026-100770",
        "CVE-2026-100771",
        "CVE-2026-100772",
        "CVE-2026-100773",
        "CVE-2026-100774",
        "CVE-2026-100775",
        "CVE-2026-100776",
        "CVE-2026-100777",
        "CVE-2026-100778",
        "CVE-2026-100779",
        "CVE-2026-100780",
        "CVE-2026-100781",
        "CVE-2026-100782",
        "CVE-2026-100783",
        "CVE-2026-100784",
        "CVE-2026-100785",
        "CVE-2026-100786",
        "CVE-2026-100788",
        "CVE-2026-100789",
        "CVE-2026-100790",
        "CVE-2026-100791",
        "CVE-2026-100792",
        "CVE-2026-100794",
        "CVE-2026-100797",
        "CVE-2026-100801",
        "CVE-2026-100803",
        "CVE-2026-100807",
        "CVE-2026-100811",
        "CVE-2026-100818",
        "CVE-2026-100819",
        "CVE-2026-100820",
        "CVE-2026-100821",
        "CVE-2026-100832",
        "CVE-2026-96869"
      ],
      "references": [
        "https://errata.rockylinux.org/RLSA-2026:80694",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543113",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543114",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543116",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543120",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543121",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543123",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543125",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543128",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543130",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543131",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543133",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543134",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543137",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543140",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543142",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543144",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543145",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543146",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543149",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543150",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543152",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543154",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543155",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543156",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543157",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543159",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543160",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543161",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543163",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543164",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543166",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543167",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543172",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543174",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543177",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543182",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543183",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543185",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543187",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543188",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543192",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2543193",
        "https://access.redhat.com/errata/RHSA-2026:80694"
      ],
      "provider_metadata": {
        "license": "CC-BY-4.0",
        "license_url": "https://creativecommons.org/licenses/by/4.0/",
        "source_advisory": "RHSA-2026:80694"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-100756",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100757",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100758",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100759",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100762",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100766",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100767",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100769",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100770",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100771",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100772",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100773",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100774",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100775",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100776",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100777",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100778",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100779",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100780",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100781",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100782",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100783",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100784",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100785",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100786",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100788",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100789",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100790",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100791",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100792",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100794",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100797",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100801",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100803",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100807",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100811",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100818",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100819",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100820",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100821",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100832",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-96869",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 427099,
  "published_at": "2026-10-24T00:04:21.976358+00:00"
}