Fluid Attacks Database

Description

Privilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel9.4	thunderbird	<0:140.10.0-1.el9_4	0:140.10.0-1.el9_4
rpm rhel10	thunderbird	<0:140.10.0-1.el10_2	0:140.10.0-1.el10_2
rpm rhel8	thunderbird	<0:140.10.0-1.el8_10	0:140.10.0-1.el8_10
rpm rhel9.6	firefox	<0:140.10.0-1.el9_6	0:140.10.0-1.el9_6
rpm rhel6	thunderbird	-	-
rpm rhel7	thunderbird	-	-
rpm rhel9	thunderbird	<0:140.10.0-1.el9_7 \|\| >=0:140.10.1, <0:140.10.1-1.el9_8	0:140.10.1-1.el9_8
rpm rhel10	firefox	<0:140.10.0-1.el10_2	0:140.10.0-1.el10_2
rpm rhel8	firefox	<0:140.10.0-1.el8_10	0:140.10.0-1.el8_10
rpm rhel9	firefox	<0:140.10.0-1.el9_8	0:140.10.0-1.el9_8

1-10 of 30

Aliases

1. CVE-2026-67692. NVD-2026-67693. OSV-2026-67694. OSV-DEBIAN-2026-67695. SECURITY-TRACKER-CVE-2026-6769

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.