Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
RHSA-2026:91633
See a problem?
Please try reporting it
to the source
first.
Source
https://access.redhat.com/errata/RHSA-2026:91633
Import Source
https://security.access.redhat.com/data/osv/RHSA-2026:91633.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2026:91633
Upstream
CVE (43)
CVE-2026-100756
CVE-2026-100757
CVE-2026-100758
CVE-2026-100759
CVE-2026-100762
CVE-2026-100766
CVE-2026-100767
CVE-2026-100769
CVE-2026-100770
CVE-2026-100771
CVE-2026-100772
CVE-2026-100773
CVE-2026-100774
CVE-2026-100775
CVE-2026-100776
CVE-2026-100777
CVE-2026-100778
CVE-2026-100779
CVE-2026-100780
CVE-2026-100781
CVE-2026-100782
CVE-2026-100783
CVE-2026-100784
CVE-2026-100785
CVE-2026-100786
CVE-2026-100788
CVE-2026-100789
CVE-2026-100790
CVE-2026-100791
CVE-2026-100792
CVE-2026-100794
CVE-2026-100797
CVE-2026-100801
CVE-2026-100803
CVE-2026-100807
CVE-2026-100811
CVE-2026-100818
CVE-2026-100819
CVE-2026-100820
CVE-2026-100821
CVE-2026-100832
CVE-2026-92035
CVE-2026-96869
Published
2026-11-13T18:48:20Z
Modified
2026-11-13T19:14:05Z
Severity
7.5 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
Red Hat Security Advisory: thunderbird security update
Details
References
https://access.redhat.com/errata/RHSA-2026:91633
https://access.redhat.com/security/updates/classification/#important
https://bugzilla.redhat.com/show_bug.cgi?id=2533789
https://bugzilla.redhat.com/show_bug.cgi?id=2543113
https://bugzilla.redhat.com/show_bug.cgi?id=2543114
https://bugzilla.redhat.com/show_bug.cgi?id=2543116
https://bugzilla.redhat.com/show_bug.cgi?id=2543120
https://bugzilla.redhat.com/show_bug.cgi?id=2543121
https://bugzilla.redhat.com/show_bug.cgi?id=2543123
https://bugzilla.redhat.com/show_bug.cgi?id=2543125
https://bugzilla.redhat.com/show_bug.cgi?id=2543128
https://bugzilla.redhat.com/show_bug.cgi?id=2543130
https://bugzilla.redhat.com/show_bug.cgi?id=2543131
https://bugzilla.redhat.com/show_bug.cgi?id=2543133
https://bugzilla.redhat.com/show_bug.cgi?id=2543134
https://bugzilla.redhat.com/show_bug.cgi?id=2543137
https://bugzilla.redhat.com/show_bug.cgi?id=2543140
https://bugzilla.redhat.com/show_bug.cgi?id=2543142
https://bugzilla.redhat.com/show_bug.cgi?id=2543144
https://bugzilla.redhat.com/show_bug.cgi?id=2543145
https://bugzilla.redhat.com/show_bug.cgi?id=2543146
https://bugzilla.redhat.com/show_bug.cgi?id=2543149
https://bugzilla.redhat.com/show_bug.cgi?id=2543150
https://bugzilla.redhat.com/show_bug.cgi?id=2543152
https://bugzilla.redhat.com/show_bug.cgi?id=2543154
https://bugzilla.redhat.com/show_bug.cgi?id=2543155
https://bugzilla.redhat.com/show_bug.cgi?id=2543156
https://bugzilla.redhat.com/show_bug.cgi?id=2543157
https://bugzilla.redhat.com/show_bug.cgi?id=2543159
https://bugzilla.redhat.com/show_bug.cgi?id=2543160
https://bugzilla.redhat.com/show_bug.cgi?id=2543161
https://bugzilla.redhat.com/show_bug.cgi?id=2543163
https://bugzilla.redhat.com/show_bug.cgi?id=2543164
https://bugzilla.redhat.com/show_bug.cgi?id=2543166
https://bugzilla.redhat.com/show_bug.cgi?id=2543167
https://bugzilla.redhat.com/show_bug.cgi?id=2543172
https://bugzilla.redhat.com/show_bug.cgi?id=2543174
https://bugzilla.redhat.com/show_bug.cgi?id=2543177
https://bugzilla.redhat.com/show_bug.cgi?id=2543182
https://bugzilla.redhat.com/show_bug.cgi?id=2543183
https://bugzilla.redhat.com/show_bug.cgi?id=2543185
https://bugzilla.redhat.com/show_bug.cgi?id=2543187
https://bugzilla.redhat.com/show_bug.cgi?id=2543188
https://bugzilla.redhat.com/show_bug.cgi?id=2543192
https://bugzilla.redhat.com/show_bug.cgi?id=2543193
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_91633.json
https://access.redhat.com/security/cve/CVE-2026-92035
https://www.cve.org/CVERecord?id=CVE-2026-92035
https://nvd.nist.gov/vuln/detail/CVE-2026-92035
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-92035
https://www.mozilla.org/security/advisories/mfsa2026-90/#CVE-2026-92035
https://www.mozilla.org/security/advisories/mfsa2026-94/#CVE-2026-92035
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-92035
https://access.redhat.com/security/cve/CVE-2026-96869
https://www.cve.org/CVERecord?id=CVE-2026-96869
https://nvd.nist.gov/vuln/detail/CVE-2026-96869
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-96869
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-96869
https://access.redhat.com/security/cve/CVE-2026-100756
https://www.cve.org/CVERecord?id=CVE-2026-100756
https://nvd.nist.gov/vuln/detail/CVE-2026-100756
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100756
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100756
https://access.redhat.com/security/cve/CVE-2026-100757
https://www.cve.org/CVERecord?id=CVE-2026-100757
https://nvd.nist.gov/vuln/detail/CVE-2026-100757
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100757
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100757
https://access.redhat.com/security/cve/CVE-2026-100758
https://www.cve.org/CVERecord?id=CVE-2026-100758
https://nvd.nist.gov/vuln/detail/CVE-2026-100758
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100758
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100758
https://access.redhat.com/security/cve/CVE-2026-100759
https://www.cve.org/CVERecord?id=CVE-2026-100759
https://nvd.nist.gov/vuln/detail/CVE-2026-100759
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100759
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100759
https://access.redhat.com/security/cve/CVE-2026-100762
https://www.cve.org/CVERecord?id=CVE-2026-100762
https://nvd.nist.gov/vuln/detail/CVE-2026-100762
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100762
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100762
https://access.redhat.com/security/cve/CVE-2026-100766
https://www.cve.org/CVERecord?id=CVE-2026-100766
https://nvd.nist.gov/vuln/detail/CVE-2026-100766
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100766
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100766
https://access.redhat.com/security/cve/CVE-2026-100767
https://www.cve.org/CVERecord?id=CVE-2026-100767
https://nvd.nist.gov/vuln/detail/CVE-2026-100767
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100767
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100767
https://access.redhat.com/security/cve/CVE-2026-100769
https://www.cve.org/CVERecord?id=CVE-2026-100769
https://nvd.nist.gov/vuln/detail/CVE-2026-100769
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100769
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100769
https://access.redhat.com/security/cve/CVE-2026-100770
https://www.cve.org/CVERecord?id=CVE-2026-100770
https://nvd.nist.gov/vuln/detail/CVE-2026-100770
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100770
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100770
https://access.redhat.com/security/cve/CVE-2026-100771
https://www.cve.org/CVERecord?id=CVE-2026-100771
https://nvd.nist.gov/vuln/detail/CVE-2026-100771
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100771
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100771
https://access.redhat.com/security/cve/CVE-2026-100772
https://www.cve.org/CVERecord?id=CVE-2026-100772
https://nvd.nist.gov/vuln/detail/CVE-2026-100772
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100772
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100772
https://access.redhat.com/security/cve/CVE-2026-100773
https://www.cve.org/CVERecord?id=CVE-2026-100773
https://nvd.nist.gov/vuln/detail/CVE-2026-100773
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100773
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100773
https://access.redhat.com/security/cve/CVE-2026-100774
https://www.cve.org/CVERecord?id=CVE-2026-100774
https://nvd.nist.gov/vuln/detail/CVE-2026-100774
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100774
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100774
https://access.redhat.com/security/cve/CVE-2026-100775
https://www.cve.org/CVERecord?id=CVE-2026-100775
https://nvd.nist.gov/vuln/detail/CVE-2026-100775
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100775
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100775
https://access.redhat.com/security/cve/CVE-2026-100776
https://www.cve.org/CVERecord?id=CVE-2026-100776
https://nvd.nist.gov/vuln/detail/CVE-2026-100776
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100776
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100776
https://access.redhat.com/security/cve/CVE-2026-100777
https://www.cve.org/CVERecord?id=CVE-2026-100777
https://nvd.nist.gov/vuln/detail/CVE-2026-100777
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100777
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100777
https://access.redhat.com/security/cve/CVE-2026-100778
https://www.cve.org/CVERecord?id=CVE-2026-100778
https://nvd.nist.gov/vuln/detail/CVE-2026-100778
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100778
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100778
https://access.redhat.com/security/cve/CVE-2026-100779
https://www.cve.org/CVERecord?id=CVE-2026-100779
https://nvd.nist.gov/vuln/detail/CVE-2026-100779
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100779
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100779
https://access.redhat.com/security/cve/CVE-2026-100780
https://www.cve.org/CVERecord?id=CVE-2026-100780
https://nvd.nist.gov/vuln/detail/CVE-2026-100780
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100780
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100780
https://access.redhat.com/security/cve/CVE-2026-100781
https://www.cve.org/CVERecord?id=CVE-2026-100781
https://nvd.nist.gov/vuln/detail/CVE-2026-100781
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100781
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100781
https://access.redhat.com/security/cve/CVE-2026-100782
https://www.cve.org/CVERecord?id=CVE-2026-100782
https://nvd.nist.gov/vuln/detail/CVE-2026-100782
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100782
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100782
https://access.redhat.com/security/cve/CVE-2026-100783
https://www.cve.org/CVERecord?id=CVE-2026-100783
https://nvd.nist.gov/vuln/detail/CVE-2026-100783
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100783
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100783
https://access.redhat.com/security/cve/CVE-2026-100784
https://www.cve.org/CVERecord?id=CVE-2026-100784
https://nvd.nist.gov/vuln/detail/CVE-2026-100784
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100784
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100784
https://access.redhat.com/security/cve/CVE-2026-100785
https://www.cve.org/CVERecord?id=CVE-2026-100785
https://nvd.nist.gov/vuln/detail/CVE-2026-100785
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100785
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100785
https://access.redhat.com/security/cve/CVE-2026-100786
https://www.cve.org/CVERecord?id=CVE-2026-100786
https://nvd.nist.gov/vuln/detail/CVE-2026-100786
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100786
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100786
https://access.redhat.com/security/cve/CVE-2026-100788
https://www.cve.org/CVERecord?id=CVE-2026-100788
https://nvd.nist.gov/vuln/detail/CVE-2026-100788
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100788
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100788
https://access.redhat.com/security/cve/CVE-2026-100789
https://www.cve.org/CVERecord?id=CVE-2026-100789
https://nvd.nist.gov/vuln/detail/CVE-2026-100789
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100789
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100789
https://access.redhat.com/security/cve/CVE-2026-100790
https://www.cve.org/CVERecord?id=CVE-2026-100790
https://nvd.nist.gov/vuln/detail/CVE-2026-100790
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100790
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100790
https://access.redhat.com/security/cve/CVE-2026-100791
https://www.cve.org/CVERecord?id=CVE-2026-100791
https://nvd.nist.gov/vuln/detail/CVE-2026-100791
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100791
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100791
https://access.redhat.com/security/cve/CVE-2026-100792
https://www.cve.org/CVERecord?id=CVE-2026-100792
https://nvd.nist.gov/vuln/detail/CVE-2026-100792
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100792
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100792
https://access.redhat.com/security/cve/CVE-2026-100794
https://www.cve.org/CVERecord?id=CVE-2026-100794
https://nvd.nist.gov/vuln/detail/CVE-2026-100794
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100794
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100794
https://access.redhat.com/security/cve/CVE-2026-100797
https://www.cve.org/CVERecord?id=CVE-2026-100797
https://nvd.nist.gov/vuln/detail/CVE-2026-100797
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100797
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100797
https://access.redhat.com/security/cve/CVE-2026-100801
https://www.cve.org/CVERecord?id=CVE-2026-100801
https://nvd.nist.gov/vuln/detail/CVE-2026-100801
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100801
https://www.mozilla.org/security/advisories/mfsa2026-120/#CVE-2026-100801
https://www.mozilla.org/security/advisories/mfsa2026-122/#CVE-2026-100801
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100801
https://access.redhat.com/security/cve/CVE-2026-100803
https://www.cve.org/CVERecord?id=CVE-2026-100803
https://nvd.nist.gov/vuln/detail/CVE-2026-100803
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100803
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100803
https://access.redhat.com/security/cve/CVE-2026-100807
https://www.cve.org/CVERecord?id=CVE-2026-100807
https://nvd.nist.gov/vuln/detail/CVE-2026-100807
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100807
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100807
https://access.redhat.com/security/cve/CVE-2026-100811
https://www.cve.org/CVERecord?id=CVE-2026-100811
https://nvd.nist.gov/vuln/detail/CVE-2026-100811
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100811
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100811
https://access.redhat.com/security/cve/CVE-2026-100818
https://www.cve.org/CVERecord?id=CVE-2026-100818
https://nvd.nist.gov/vuln/detail/CVE-2026-100818
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100818
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100818
https://access.redhat.com/security/cve/CVE-2026-100819
https://www.cve.org/CVERecord?id=CVE-2026-100819
https://nvd.nist.gov/vuln/detail/CVE-2026-100819
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100819
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100819
https://access.redhat.com/security/cve/CVE-2026-100820
https://www.cve.org/CVERecord?id=CVE-2026-100820
https://nvd.nist.gov/vuln/detail/CVE-2026-100820
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100820
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100820
https://access.redhat.com/security/cve/CVE-2026-100821
https://www.cve.org/CVERecord?id=CVE-2026-100821
https://nvd.nist.gov/vuln/detail/CVE-2026-100821
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100821
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100821
https://access.redhat.com/security/cve/CVE-2026-100832
https://www.cve.org/CVERecord?id=CVE-2026-100832
https://nvd.nist.gov/vuln/detail/CVE-2026-100832
https://www.mozilla.org/security/advisories/mfsa2026-102/#CVE-2026-100832
https://www.mozilla.org/security/advisories/mfsa2026-99/#CVE-2026-100832
Affected packages
Red Hat:rhel_e4s:8.8::appstream
thunderbird
Package
Name
thunderbird
Purl
pkg:rpm/redhat/thunderbird
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:140.17.0-1.el8_8
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:91633.json"
thunderbird-debuginfo
Package
Name
thunderbird-debuginfo
Purl
pkg:rpm/redhat/thunderbird-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:140.17.0-1.el8_8
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:91633.json"
thunderbird-debugsource
Package
Name
thunderbird-debugsource
Purl
pkg:rpm/redhat/thunderbird-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:140.17.0-1.el8_8
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:91633.json"
Red Hat:rhel_tus:8.8::appstream
thunderbird
Package
Name
thunderbird
Purl
pkg:rpm/redhat/thunderbird
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:140.17.0-1.el8_8
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:91633.json"
thunderbird-debuginfo
Package
Name
thunderbird-debuginfo
Purl
pkg:rpm/redhat/thunderbird-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:140.17.0-1.el8_8
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:91633.json"
thunderbird-debugsource
Package
Name
thunderbird-debugsource
Purl
pkg:rpm/redhat/thunderbird-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:140.17.0-1.el8_8
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:91633.json"
RHSA-2026:91633 - OSV