RHSA-2026:7672: CVEs fixed (Red Hat)

RHSA-2026:7672 fixes 3 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-5731 CRITICAL 9.8 DOWNGRADE DOWNGRADE Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.
• CVE-2026-5732 HIGH 8.8 UPGRADE Incorrect boundary conditions, integer overflow in the Graphics: Text component
• CVE-2026-5734 CRITICAL 9.8 UPGRADE UPGRADE Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 14

Applies to

• RHEL 10 · fixed in firefox-140.9.1-1.el10_1

← Back to latest CVEs