Debian/thunderbird: critical 9.6
Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115
Action: Upgrade thunderbird to 1:153.5.0esr-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:153.5.0esr-1 | - |
Fixed versions
| 1:153.5.0esr-1 |
Sources
- osv: DEBIAN-CVE-2026-109708#Debian:14/thunderbird
- https://security-tracker.debian.org/tracker/CVE-2026-109708
published · modified · JSON