vulnerability

Rocky Linux: CVE-2024-7526: thunderbird (Multiple Advisories)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:N/A:N)

Published

Aug 6, 2024

Added

May 8, 2025

Modified

Mar 31, 2026

Description

ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

Solutions

rocky-upgrade-firefoxrocky-upgrade-firefox-debuginforocky-upgrade-firefox-debugsourcerocky-upgrade-thunderbirdrocky-upgrade-thunderbird-debuginforocky-upgrade-thunderbird-debugsource

References

CVE-2024-7526
https://attackerkb.com/topics/CVE-2024-7526
CWE-908
EUVD-EUVD-2024-48433
https://errata.rockylinux.org/RLSA-2024:5391
https://errata.rockylinux.org/RLSA-2024:5402
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48433

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report