Debian/thunderbird: critical 9.6
Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Fire
Action: Upgrade thunderbird to 1:140.17.0esr-1~deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:140.17.0esr-1~deb12u1 | - |
Fixed versions
| 1:140.17.0esr-1~deb12u1 |
Sources
- osv: DEBIAN-CVE-2026-100819#Debian:12/thunderbird
- https://security-tracker.debian.org/tracker/CVE-2026-100819
published · modified · JSON