CVE-2026-7322: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1
Memory safety bugs present in Firefox ESR 115.35.0, Firefox ESR 140.10.0 and Firefox 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
Other sources
Memory safety bugs present in Firefox ESR 115.35.0, Firefox ESR 140.10.0, Thunderbird ESR 140.10.0, Firefox 150.0.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, and Firefox ESR 115.35.1.
— Red Hat
Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
— Mozilla
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 115.35.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 150.0.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 140.10.1 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 115.35.1 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 140.10.1 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 150.0.1 - Upgrade
Upgrade
Thunderbird ESRto a version that resolves this vulnerability.Fixed in 140.10.1 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 150.0.1
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-7322?
CVE-2026-7322 is classified as a high severity vulnerability due to memory safety issues in specific versions of Mozilla products.
How do I fix CVE-2026-7322?
To resolve CVE-2026-7322, update to Firefox ESR 115.35.1, Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1, or Thunderbird 150.0.1.
Which Mozilla products are affected by CVE-2026-7322?
CVE-2026-7322 affects Firefox ESR 115.35.0 and 140.10.0, Thunderbird ESR 140.10.0, Firefox 150.0.0, and Thunderbird 150.0.0.
What are the potential impacts of CVE-2026-7322?
Exploitation of CVE-2026-7322 could lead to arbitrary code execution or data corruption due to memory safety vulnerabilities.
When was CVE-2026-7322 disclosed?
CVE-2026-7322 was disclosed in the context of multiple memory safety bugs addressed by Mozilla in their recent releases.