Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.11, Firefox < 89, and Firefox ESR < 78.11.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade firefoxUpgrade thunderbird | May 4, 2022 | Jun 24, 2021 |
| Alpine Linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade mozjs78Upgrade firefox-esrUpgrade librewolf | Aug 22, 2024 | Jun 24, 2021 |
| Amazon Linux Ami 2 | — | Upgrade thunderbirdUpgrade thunderbird-debuginfo | Jul 2, 2021 | Jun 24, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 24, 2021 |
| Centos_linux | — | Upgrade firefox-debugsourceUpgrade firefoxUpgrade thunderbirdUpgrade thunderbird-debugsourceUpgrade firefox-debuginfoUpgrade thunderbird-debuginfo | Jun 3, 2021 | Jun 2, 2021 |
| Debian | — | Upgrade firefox-esrUpgrade thunderbird | Jun 4, 2021 | Jun 4, 2021 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird. | Aug 11, 2022 | Jun 24, 2021 |
| Mfsa2021 23 | — | Upgrade to Mozilla Firefox version 89.0Upgrade to the latest version of Mozilla Firefox | Jun 2, 2021 | Jun 1, 2021 |
| Mfsa2021 24 | — | Upgrade to Mozilla Firefox ESR version 78.11Upgrade to the latest version of Mozilla Firefox | Jun 2, 2021 | Jun 1, 2021 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 78.11Upgrade to the latest version of Mozilla Thunderbird | Jun 4, 2021 | Jun 3, 2021 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 78.11.0-11.4.35.0.1.94.3 on Solaris 11.4Upgrade web/browser/firefox to version 78.11.0-11.4.35.0.1.94.3 on Solaris 11.4Upgrade library/libmozjs-78 to version 78.11.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 78.11.0-11.4.35.0.1.94.3 on Solaris 11.4 | Jul 21, 2021 | Jun 24, 2021 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefox | Jun 4, 2021 | Jun 1, 2021 |
| Redhat_linux | — | No solution existsUpgrade firefox-debuginfoUpgrade firefox-debugsourceUpgrade thunderbird-debuginfoUpgrade thunderbird-debugsourceUpgrade thunderbirdUpgrade firefox | Jun 3, 2021 | Jun 2, 2021 |
| Rocky_linux | — | Upgrade thunderbirdUpgrade firefox-debuginfoUpgrade firefoxUpgrade thunderbird-debuginfoUpgrade firefox-debugsourceUpgrade thunderbird-debugsource | May 5, 2022 | Jun 24, 2021 |
| Suse | — | Upgrade MozillaFirefox-develUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefoxUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translations-otherUpgrade mozillafirefox-buildsymbolsUpgrade MozillaThunderbird-translations-common | Jun 9, 2021 | Jun 2, 2021 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Jun 3, 2021 | Jun 2, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub