| firefox: Compartment mismatch when parsing JavaScript JSON moduleCVE-2025-0240 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
Medium
|
No fix reported |
|
| firefox: Alt-Svc ALPN validation failure when redirectedCVE-2025-0239 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
Medium
|
No fix reported |
|
| firefox: Memory corruption when using JavaScript Text SegmentationCVE-2025-0241 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
Medium
|
No fix reported |
|
| firefox: thunderbird: Use-after-free when breaking lines in textCVE-2025-0238 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
Medium
|
No fix reported |
|
| firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6CVE-2025-0242 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
High
|
No fix reported |
|
| firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6CVE-2025-0243 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
Medium
|
No fix reported |
|
| firefox: thunderbird: Fullscreen notification is not displayed when fullscreen is re-requestedCVE-2025-1018 |
Red Hat Enterprise Linux 10/thunderbird-flatpak-containerRed Hat Enterprise Linux 10/thunderbird |
Red Hat |
Medium
|
No fix reported |
|
| firefox: thunderbird: Use-after-free in Custom HighlightCVE-2025-1010 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
High
|
No fix reported |
|
| firefox: thunderbird: Use-after-free during concurrent delazificationCVE-2025-1012 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
Medium
|
No fix reported |
|
| firefox: thunderbird: A bug in WebAssembly code generation could result in a crashCVE-2025-1011 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
Medium
|
No fix reported |
|
| firefox: thunderbird: Certificate length was not properly checkedCVE-2025-1014 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
Low
|
No fix reported |
|
| firefox: thunderbird: Fullscreen notification not properly displayedCVE-2025-1019 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
Medium
|
No fix reported |
|
| firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windowsCVE-2025-1013 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
Low
|
No fix reported |
|
| firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7CVE-2025-1016 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
High
|
No fix reported |
|
| thunderbird: Unsanitized address book fieldsCVE-2025-1015 |
Red Hat Enterprise Linux 10/thunderbird-flatpak-containerRed Hat Enterprise Linux 10/thunderbird |
Red Hat |
Low
|
No fix reported |
|
| firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7CVE-2025-1017 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
Medium
|
No fix reported |
|
| firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8CVE-2025-1938 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
High
|
No fix reported |
|
| firefox: thunderbird: Memory safety bugs fixed in Firefox 136 and Thunderbird 136CVE-2025-1943 |
Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox |
Red Hat |
High
|
No fix reported |
|
| thunderbird: Crafted email message incorrectly shown as being encryptedCVE-2025-26696 |
Red Hat Enterprise Linux 10/thunderbird-flatpak-containerRed Hat Enterprise Linux 10/thunderbird |
Red Hat |
Medium
|
No fix reported |
|
| thunderbird: Downloading of OpenPGP keys from WKD used incorrect paddingCVE-2025-26695 |
Red Hat Enterprise Linux 10/thunderbird-flatpak-containerRed Hat Enterprise Linux 10/thunderbird |
Red Hat |
Low
|
No fix reported |
|
