Use-after-free in the IPC component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Version | Base score | Base severity | Vector |
|---|---|---|---|
| 3.1 | 8.8 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the IPC component
| Version | Base score | Base severity | Vector |
|---|---|---|---|
| 3.1 | 7.5 | HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
| CAPEC ID | Description |
|---|
RHSA-2026:2231: Red Hat Enterprise Linux Server (v. 7 ELS)
RHSA-2026:2271: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux AppStream EUS (v. 10.0)
RHSA-2026:2286: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux AppStream EUS (v. 10.0)
RHSA-2026:0667: Red Hat Enterprise Linux AppStream (v. 8)
RHSA-2026:2220: Red Hat Enterprise Linux AppStream (v. 8)
RHSA-2026:2074: Red Hat Enterprise Linux AppStream AUS (v. 8.2)
RHSA-2026:1471: Red Hat Enterprise Linux AppStream AUS (v. 8.2)
RHSA-2026:2073: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)
RHSA-2026:1461: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)
RHSA-2026:2070: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)
RHSA-2026:1487: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)
RHSA-2026:2069: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)
RHSA-2026:1462: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)
RHSA-2026:2047: Red Hat Enterprise Linux AppStream E4S (v.9.0)
RHSA-2026:1413: Red Hat Enterprise Linux AppStream E4S (v.9.0)
RHSA-2026:2044: Red Hat Enterprise Linux AppStream E4S (v.9.2)
RHSA-2026:1415: Red Hat Enterprise Linux AppStream E4S (v.9.2)
RHSA-2026:2041: Red Hat Enterprise Linux AppStream EUS (v.9.4)
RHSA-2026:1414: Red Hat Enterprise Linux AppStream EUS (v.9.4)
RHSA-2026:2043: Red Hat Enterprise Linux AppStream EUS (v.9.6)
RHSA-2026:1320: Red Hat Enterprise Linux AppStream EUS (v.9.6)
RHSA-2026:0694: Red Hat Enterprise Linux AppStream (v. 9)
RHSA-2026:0924: Red Hat Enterprise Linux AppStream (v. 9)
| Event | Date |
|---|---|
| Reported to Red Hat. | 2026-01-13 14:01:39 |
| Made public. | 2026-01-13 13:30:55 |