Red Hat Product Errata RHSA-2026:10757 - Security Advisory Issued: 2026-04-27 Updated: 2026-04-27 RHSA-2026:10757 - Security Advisory Overview Updated Packages Synopsis Important: firefox security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for firefox is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772) firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754) firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component (CVE-2026-6762) firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752) firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770) firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757) firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767) firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786) firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753) firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759) firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747) firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749) firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766) firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761) firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763) firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750) firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748) firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785) firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771) firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764) firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765) firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769) firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751) firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-6746) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Fixes BZ - 2460074 - CVE-2026-6772 firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS BZ - 2460075 - CVE-2026-6754 firefox: thunderbird: Use-after-free in the JavaScript Engine component BZ - 2460076 - CVE-2026-6762 firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component BZ - 2460078 - CVE-2026-6752 firefox: thunderbird: Incorrect boundary conditions in the WebRTC component BZ - 2460079 - CVE-2026-6770 firefox: thunderbird: Other issue in the Storage: IndexedDB component BZ - 2460085 - CVE-2026-6757 firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component BZ - 2460086 - CVE-2026-6767 firefox: thunderbird: Other issue in the Libraries component in NSS BZ - 2460088 - CVE-2026-6786 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 BZ - 2460092 - CVE-2026-6753 firefox: thunderbird: Incorrect boundary conditions in the WebRTC component BZ - 2460094 - CVE-2026-6759 firefox: thunderbird: Use-after-free in the Widget: Cocoa component BZ - 2460095 - CVE-2026-6747 firefox: thunderbird: Use-after-free in the WebRTC component BZ - 2460096 - CVE-2026-6749 firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component BZ - 2460097 - CVE-2026-6766 firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS BZ - 2460099 - CVE-2026-6761 firefox: thunderbird: Privilege escalation in the Networking component BZ - 2460101 - CVE-2026-6763 firefox: thunderbird: Mitigation bypass in the File Handling component BZ - 2460102 - CVE-2026-6750 firefox: thunderbird: Privilege escalation in the Graphics: WebRender component BZ - 2460103 - CVE-2026-6748 firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component BZ - 2460104 - CVE-2026-6785 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 BZ - 2460105 - CVE-2026-6771 firefox: thunderbird: Mitigation bypass in the DOM: Security component BZ - 2460106 - CVE-2026-6764 firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component BZ - 2460107 - CVE-2026-6765 firefox: thunderbird: Information disclosure in the Form Autofill component BZ - 2460108 - CVE-2026-6769 firefox: thunderbird: Privilege escalation in the Debugger component BZ - 2460109 - CVE-2026-6751 firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component BZ - 2460110 - CVE-2026-6776 firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component BZ - 2460112 - CVE-2026-6746 firefox: thunderbird: Use-after-free in the DOM: Core & HTML component CVEs CVE-2026-6746 CVE-2026-6747 CVE-2026-6748 CVE-2026-6749 CVE-2026-6750 CVE-2026-6751 CVE-2026-6752 CVE-2026-6753 CVE-2026-6754 CVE-2026-6757 CVE-2026-6759 CVE-2026-6761 CVE-2026-6762 CVE-2026-6763 CVE-2026-6764 CVE-2026-6765 CVE-2026-6766 CVE-2026-6767 CVE-2026-6769 CVE-2026-6770 CVE-2026-6771 CVE-2026-6772 CVE-2026-6776 CVE-2026-6785 CVE-2026-6786 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM firefox-140.10.0-1.el9_7.src.rpm SHA-256: a6aec55aede6942ada7b9a754165b9cc30bd305a787ec3eab7b1ebae3cfbecf9 x86_64 firefox-140.10.0-1.el9_7.x86_64.rpm SHA-256: 9035e4836d44afa959137d4f016a3237498d8a4a71c4371ca7c0d51e762c3289 firefox-debuginfo-140.10.0-1.el9_7.x86_64.rpm SHA-256: 79c6fa23bcf8ab6f93078a10922bb6ae4e052122f7afb1e6734234d408332480 firefox-debugsource-140.10.0-1.el9_7.x86_64.rpm SHA-256: b8068dc3bb0a329fe7aa451dc1cc9a83f70700f052f2216e0e6ca04abe57e553 firefox-x11-140.10.0-1.el9_7.x86_64.rpm SHA-256: e6a91ba10165457b6746f51c0d153be6f459cbb4b0981e9479ade1eba963b05a Red Hat Enterprise Linux for IBM z Systems 9 SRPM firefox-140.10.0-1.el9_7.src.rpm SHA-256: a6aec55aede6942ada7b9a754165b9cc30bd305a787ec3eab7b1ebae3cfbecf9 s390x firefox-140.10.0-1.el9_7.s390x.rpm SHA-256: 7c4eb218031973ba18e820ded8e3b92fb979bd623c0812f00ed8aac8fd0f0e93 firefox-debuginfo-140.10.0-1.el9_7.s390x.rpm SHA-256: e0b8b99dec5cb9f235589de325887e5b78cb4bf9ede03eb63affb894c4a349fe firefox-debugsource-140.10.0-1.el9_7.s390x.rpm SHA-256: 4c8f312e8b61d6e84a5d021d79e875ec1fc18b9a4acf92536c32881e444d789c firefox-x11-140.10.0-1.el9_7.s390x.rpm SHA-256: 47ee3239024a82fa33615a73cd6ecfdd0ea06683b9902645880551c632efc356 Red Hat Enterprise Linux for Power, little endian 9 SRPM firefox-140.10.0-1.el9_7.src.rpm SHA-256: a6aec55aede6942ada7b9a754165b9cc30bd305a787ec3eab7b1ebae3cfbecf9 ppc64le firefox-140.10.0-1.el9_7.ppc64le.rpm SHA-256: 43bc02ea587fefaa3968e53e95dd7275a9e2679a204bd89159757f647082e11c firefox-debuginfo-140.10.0-1.el9_7.ppc64le.rpm SHA-256: 5dc56599c1989ada1f1f92fc78a2c2348c50a3f3995f417bc7ab0d590ff118f5 firefox-debugsource-140.10.0-1.el9_7.ppc64le.rpm SHA-256: 612234e34fec97d1a1d00cfd1f15f85c6654816ef4477b12246a1417940271d2 firefox-x11-140.10.0-1.el9_7.ppc64le.rpm SHA-256: 415cec19e105784aa041cfde3dd7bd10f034f33a5cfefa9291a2f93ce502d124 Red Hat Enterprise Linux for ARM 64 9 SRPM firefox-140.10.0-1.el9_7.src.rpm SHA-256: a6aec55aede6942ada7b9a754165b9cc30bd305a787ec3eab7b1ebae3cfbecf9 aarch64 firefox-140.10.0-1.el9_7.aarch64.rpm SHA-256: 65bcd28a3ac61aee373745be94cbf6d55f714bc514dac045fa3df10bf590b204 firefox-debuginfo-140.10.0-1.el9_7.aarch64.rpm SHA-256: 743b739946517cc4ee87c8f783ea365619ed4ecd8246ecae6a78ba83d1583818 firefox-debugsource-140.10.0-1.el9_7.aarch64.rpm SHA-256: 95850440fd722a2120d01b202b50cf64db550e5342ad4575f72d1c794144d8c5 firefox-x11-140.10.0-1.el9_7.aarch64.rpm SHA-256: 1995b1231bb0764774329348e1a20beea663953c33fcedb6ef4209045c234c3c The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .