vulnerability

Alma Linux: CVE-2021-23978: Important: thunderbird security update (Multiple Advisories)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

Published

Feb 26, 2021

Added

May 4, 2022

Modified

Mar 31, 2026

Description

Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.

Solutions

alma-upgrade-firefoxalma-upgrade-thunderbird

References

CVE-2021-23978
https://attackerkb.com/topics/CVE-2021-23978
CWE-787
EUVD-EUVD-2021-10899
https://errata.almalinux.org/8/ALSA-2021-0655.html
https://errata.almalinux.org/8/ALSA-2021-0657.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-10899

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report