CVE-2026-7322

CVE Enrichment

CVSS: 7.3 HIGH
EPSS: 0.32%
EPSS Percentile: 24.67%
CISA KEV: Not listed

Description

Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 28-Apr-2026 22:16
Last Modified: 27-Oct-2026 03:10
EPSS Date: 2026-11-04
CWE: CWE-119, CWE-416, CWE-787

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:L /
                            I:L /
                            A:L

CNA Products / Version Status

Red Hat · Red Hat Enterprise Linux 10 Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

CPEs: cpe:/o:redhat:enterprise_linux:10

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: rhel10/firefox-flatpak
Red Hat · Red Hat Enterprise Linux 10 Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

CPEs: cpe:/o:redhat:enterprise_linux:10

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: rhel10/thunderbird-flatpak
Red Hat · Red Hat Enterprise Linux 10 Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el10_2 ≤ version < * — unaffected (rpm)

CPEs: cpe:/o:redhat:enterprise_linux:10.2

collectionURL: https://catalog.redhat.com/software/containers/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 10 Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el10_2 ≤ version < * — unaffected (rpm)

CPEs: cpe:/o:redhat:enterprise_linux:10.2

collectionURL: https://catalog.redhat.com/software/containers/
packageName: thunderbird
Red Hat · Red Hat Enterprise Linux 10.0 Extended Update Support Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el10_0 ≤ version < * — unaffected (rpm)

CPEs: cpe:/o:redhat:enterprise_linux_eus:10.0

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 10.0 Extended Update Support Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el10_0 ≤ version < * — unaffected (rpm)

CPEs: cpe:/o:redhat:enterprise_linux_eus:10.0

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: thunderbird
Red Hat · Red Hat Enterprise Linux 6 Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: unknown

CPEs: cpe:/o:redhat:enterprise_linux:6

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 6 Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: unknown

CPEs: cpe:/o:redhat:enterprise_linux:6

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: thunderbird
Red Hat · Red Hat Enterprise Linux 7 Extended Lifecycle Support Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el7_9 ≤ version < * — unaffected (rpm)

CPEs: cpe:/o:redhat:rhel_els:7

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 7 Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: unknown

CPEs: cpe:/o:redhat:enterprise_linux:7

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: thunderbird
Red Hat · Red Hat Enterprise Linux 8 Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el8_10 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:enterprise_linux:8

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 8 Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el8_10 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:enterprise_linux:8

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: thunderbird
Red Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el8_4 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_aus:8.4

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el8_4 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_aus:8.4

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: thunderbird
Red Hat · Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el8_4 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_eus_long_life:8.4

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el8_4 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_eus_long_life:8.4

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: thunderbird
Red Hat · Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el8_6 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_aus:8.6

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el8_6 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_aus:8.6

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: thunderbird
Red Hat · Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el8_6 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_eus_long_life:8.6

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el8_6 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_eus_long_life:8.6

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: thunderbird
Red Hat · Red Hat Enterprise Linux 8.8 Telecommunications Update Service Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el8_8 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_tus:8.8

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 8.8 Telecommunications Update Service Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el8_8 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_tus:8.8

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: thunderbird
Red Hat · Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el8_8 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_e4s:8.8

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el8_8 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_e4s:8.8

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: thunderbird
Red Hat · Red Hat Enterprise Linux 9 Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el9_8 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:enterprise_linux:9

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 9 Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el9_8 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:enterprise_linux:9

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: thunderbird
Red Hat · Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el9_0 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_e4s:9.0

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el9_2 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_e4s:9.2

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el9_2 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_e4s:9.2

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: thunderbird
Red Hat · Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el9_4 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_e4s:9.4

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el9_4 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_e4s:9.4

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: thunderbird
Red Hat · Red Hat Enterprise Linux 9.6 Extended Update Support Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el9_6 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_eus:9.6

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: firefox
Red Hat · Red Hat Enterprise Linux 9.6 Extended Update Support Source: CNA · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Default status: affected

0:140.10.1-1.el9_6 ≤ version < * — unaffected (rpm)

CPEs: cpe:/a:redhat:rhel_eus:9.6

collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: thunderbird
Mozilla · Firefox Source: CNA · [email protected]
Default status: unknown

115.35.1 ≤ version ≤ 115.* — unaffected (rpm)
140.10.1 ≤ version ≤ 140.* — unaffected (rpm)
150.0.1 ≤ version ≤ * — unaffected (rpm)
Mozilla · Thunderbird Source: CNA · [email protected]
Default status: unknown

140.10.1 ≤ version ≤ 140.* — unaffected (rpm)
150.0.1 ≤ version ≤ * — unaffected (rpm)

Affected Products / Versions

mozilla / firefox Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 115.35.1
cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*
mozilla / firefox Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 150.0.1
cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*
mozilla / firefox Source: NVD CPE · affected
Version / affected range: * · from (inclusive) 128.0 · before (exclusive) 140.10.1
cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*
mozilla / thunderbird Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 140.10.1
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*
mozilla / thunderbird Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 150.0.1
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*

References

Last enrichment sync: 04-Nov-2026 23:37
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

security defects, including critical and high-severity memory safety bugs collectively tracked as CVE-2026-7322, CVE-2026-7323, and CVE-2026-7324. Chrome 147 and Firefox 150 Updates Fix Memory-Safety Flaws

CVE (7)

Vendors (2)

Products (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.