REDHAT-BUG-2489222: High severity Mozilla Firefox vulnerability

Published Jun 16, 2026

Updated

Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152.

Affected Software

2 affected components

Mozilla Firefox=151

Mozilla Thunderbird=151

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Firefox to a version that resolves this vulnerability.
Fixed in 152
Upgrade
Upgrade Thunderbird to a version that resolves this vulnerability.
Fixed in 152

Event History

Jun 16, 2026

Data Sourced

via Red Hat·02:02 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2489222?

The severity of REDHAT-BUG-2489222 is classified as high with a score of 7.

What is the impact of REDHAT-BUG-2489222?

REDHAT-BUG-2489222 could potentially allow attackers to exploit memory corruption vulnerabilities to run arbitrary code.

How do I fix REDHAT-BUG-2489222?

To fix REDHAT-BUG-2489222, upgrade to Firefox version 152 or later.

Which software is affected by REDHAT-BUG-2489222?

REDHAT-BUG-2489222 affects Mozilla Firefox 151 and Thunderbird 151.

When was REDHAT-BUG-2489222 published?

REDHAT-BUG-2489222 was published on June 16, 2026.