RHSA-2026:93957: Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.Security Fix(es): firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801) firefox: thunderbird: Invalid pointer in the JavaScript Engine component (CVE-2026-117910) firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-117876) firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-117860) firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-117985) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117887) firefox: thunderbird: Use-after-free in the Graphics component (CVE-2026-117987) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117943) firefox: thunderbird: Privilege escalation in the DOM: UI Events & Focus Handling component (CVE-2026-117995) firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-117908) firefox: thunderbird: Use-after-free in the Layout component (CVE-2026-117934) firefox: thunderbird: Use-after-free in the Audio/Video: Playback component (CVE-2026-117905) firefox: thunderbird: Use-after-free in the Audio/Video component (CVE-2026-117923) firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-117890) firefox: thunderbird: Incorrect boundary conditions in the Layout: Tables component (CVE-2026-117879) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117895) firefox: thunderbird: Use-after-free in the DOM: CSS Object Model component (CVE-2026-117941) firefox: thunderbird: Mitigation bypass in the DOM: Push Subscriptions component (CVE-2026-117998) firefox: thunderbird: Use-after-free in the XML component (CVE-2026-117880) firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-117907) firefox: thunderbird: Race condition in the IPC component (CVE-2026-117999) firefox: thunderbird: Use-after-free in the DOM: Editor component (CVE-2026-117900) firefox: thunderbird: Sandbox escape in the DOM: Networking component (CVE-2026-117868) firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-117866) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117925) firefox: thunderbird: Use-after-free in the Layout component (CVE-2026-117882) firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-117921) firefox: thunderbird: Privilege escalation in the Toolkit component (CVE-2026-117981) firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-117914) firefox: thunderbird: Incorrect boundary conditions in the Layout: Tables component (CVE-2026-117897) firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Networking component (CVE-2026-117862) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117896) firefox: Site isolation issue in the Networking: HTTP component (CVE-2026-117958) firefox: thunderbird: Incorrect boundary conditions in the DOM: Core & HTML component (CVE-2026-117950) firefox: thunderbird: Invalid pointer in the JavaScript Engine: JIT component (CVE-2026-117982) firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-117865) firefox: thunderbird: Use-after-free in the Graphics component (CVE-2026-117986) firefox: thunderbird: Integer overflow in the Graphics: Text component (CVE-2026-117993) firefox: thunderbird: Use-after-free in the Graphics component (CVE-2026-117980) firefox: thunderbird: Use-after-free in the Audio/Video: Playback component (CVE-2026-117911) firefox: thunderbird: Information disclosure in the Networking: HTTP component (CVE-2026-118000) firefox: thunderbird: Use-after-free in the Layout component (CVE-2026-117867) firefox: thunderbird: Same-origin policy bypass in the CSS Parsing and Computation component (CVE-2026-117912) firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component (CVE-2026-117960) firefox: thunderbird: Sandbox escape in the Form Manager component (CVE-2026-117864) firefox: thunderbird: Invalid pointer in the Graphics: WebRender component (CVE-2026-117917) firefox: thunderbird: Use-after-free in the DOM: Events component (CVE-2026-117931) firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-117988) firefox: thunderbird: Invalid pointer in the Graphics component (CVE-2026-117871) firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-117898) firefox: thunderbird: Use-after-free in the Panning and Zooming component (CVE-2026-117964) firefox: thunderbird: Incorrect boundary conditions in the Security: PSM component (CVE-2026-117893) firefox: thunderbird: Privilege escalation due to use-after-free in the WebRTC: Networking component (CVE-2026-117892) firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-117916) firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-117902) firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-117967) firefox: thunderbird: Use-after-free in the XML component (CVE-2026-117947) firefox: thunderbird: Invalid pointer in the Nimbus Desktop Client component (CVE-2026-117956) firefox: thunderbird: Use-after-free in the Layout: Scrolling and Overflow component (CVE-2026-117875) firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics: WebRender component (CVE-2026-117975) firefox: thunderbird: Incorrect boundary conditions in the XML component (CVE-2026-117945) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117901) firefox: thunderbird: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-117946) firefox: thunderbird: Incorrect boundary conditions in the SVG component (CVE-2026-117926) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117881) firefox: thunderbird: Invalid pointer in the JavaScript Engine: JIT component (CVE-2026-117969) firefox: thunderbird: Information disclosure in the CSS Parsing and Computation component (CVE-2026-117992) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117940) firefox: thunderbird: Incorrect boundary conditions in the DOM: Service Workers component (CVE-2026-117963) firefox: thunderbird: Site isolation issue in the DOM: Service Workers component (CVE-2026-117959) firefox: thunderbird: Other issue, use-after-free in the Storage: IndexedDB component (CVE-2026-117878) firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-117948) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117932) firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-117886) firefox: thunderbird: Use-after-free in the Layout component (CVE-2026-117938) firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-117927) firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-117924) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117949) firefox: thunderbird: Incorrect boundary conditions in the Layout: Scrolling and Overflow component (CVE-2026-117984) firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-117913) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117936) firefox: thunderbird: Invalid pointer in the JavaScript Engine component (CVE-2026-117937) firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-117883) firefox: thunderbird: Use-after-free in the Graphics component (CVE-2026-117972) firefox: thunderbird: Use-after-free in the Internationalization component (CVE-2026-117874) firefox: thunderbird: Use-after-free in the Layout: Grid component (CVE-2026-117885) firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-117978) firefox: thunderbird: Use-after-free in the Layout component (CVE-2026-117944) firefox: thunderbird: Information disclosure in the Networking: DNS component (CVE-2026-118003) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117953) firefox: thunderbird: Information disclosure due to race condition in the Networking component (CVE-2026-118002) firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-117920) firefox: thunderbird: Use-after-free in the Audio/Video component (CVE-2026-117903) firefox: thunderbird: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-117942) firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-117888) firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Signaling component (CVE-2026-117894) firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-117904) firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-117955) firefox: thunderbird: Use-after-free in the Networking: WebSockets component (CVE-2026-117922) firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component (CVE-2026-117962) firefox: thunderbird: Other issue in the Console component (CVE-2026-117977) firefox: thunderbird: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-117935) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117919) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117869) firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-117891) firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-117884) firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-117899) firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-117861) firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-117909) firefox: thunderbird: Same-origin policy bypass in the CSS Parsing and Computation component (CVE-2026-117928) firefox: thunderbird: Frame poisoning in the CSS Parsing and Computation component (CVE-2026-117933) firefox: thunderbird: Use-after-free in the Graphics component (CVE-2026-117989) firefox: thunderbird: Use-after-free in the JavaScript: Standard Library component (CVE-2026-117872) firefox: thunderbird: Incorrect boundary conditions in the JavaScript Engine component (CVE-2026-117889) firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-117979) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117968) firefox: thunderbird: Use-after-free in the Graphics component (CVE-2026-117983) firefox: thunderbird: Use-after-free in the Networking: DNS component (CVE-2026-117973) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117929) firefox: thunderbird: Uninitialized memory in the Networking component (CVE-2026-117952) firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-117873) firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-117976) firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-117951) firefox: thunderbird: Incorrect boundary conditions in the Layout: Block and Inline component (CVE-2026-117915) firefox: thunderbird: Incorrect boundary conditions in the CSS Transitions and Animations component (CVE-2026-118004) firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-117994) firefox: thunderbird: Use-after-free in the XML component (CVE-2026-117939) firefox: thunderbird: Information disclosure due to uninitialized memory in the Audio/Video component (CVE-2026-117863) firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-117961) firefox: thunderbird: Race condition in the Disability Access APIs component (CVE-2026-117970) firefox: thunderbird: Use-after-free in the XML component (CVE-2026-117974) firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-117966) firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-117918) firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-117991) firefox: thunderbird: Sandbox escape due to use-after-free in the Widget component (CVE-2026-117997) firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-117996) firefox: thunderbird: Sandbox escape due to use-after-free in the Print Preview component (CVE-2026-117971) firefox: thunderbird: Cryptographic issue in the WebRTC: Networking component (CVE-2026-117957) firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-117870) firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-117877) firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-117990) firefox: thunderbird: Same-origin policy bypass in the Address Bar component (CVE-2026-117965) firefox: thunderbird: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-117930) firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-117906) firefox: thunderbird: Use-after-free in the Layout: Positioned component (CVE-2026-117954) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.