Loading story…
Red Hat released Important Firefox security updates for Red Hat Enterprise Linux 8, 9, and 10, updating the browser to the 140.14.0 package stream across standard, extended support, and lifecycle variants on x86_64, s390x, ppc64le, and aarch64. The advisories say the updates remediate 31 Mozilla Firefox vulnerabilities spanning privilege escalation, use-after-free, information disclosure, same-origin policy bypass, site isolation flaws, mitigation bypasses, integer overflow, and JIT miscompilation issues.
The fixed issues include CVEs in the CVE-2026-74934 to CVE-2026-74990 range, with examples such as CVE-2026-74983, CVE-2026-74953, CVE-2026-74976, and CVE-2026-74990. Red Hat said affected components include CanvasWebGL, Cookies, Graphics, WebAssembly, WebExtensions, DOM, Safe Browsing, and Remote Settings Client, while related downstream tracking appeared in Rocky Linux through RLSA-2026:58898, indicating corresponding ecosystem patching for Firefox on enterprise Linux platforms.
See affected versions and whether adversaries are exploiting it.
8 events from the most recent confirmed update back to the earliest known activity.
AlmaLinux published ALSA-2026:58897 for Firefox and Firefox-X11 on AlmaLinux 9 across its supported repositories. The update addresses 31 Firefox CVEs, including CVE-2026-74944, and the notice states that exploits are available.
AlmaLinux published ALSA-2026:58899 for Firefox on AlmaLinux 10 across multiple repositories and deployment variants. The update addresses 31 CVEs, and the notice states that exploits are available.
Red Hat published Important advisory RHSA-2026:58899, providing Firefox 140.14.0-1.el10_2 for RHEL 10 and RHEL 10.2 support streams. The update addresses 31 Mozilla Firefox vulnerabilities, including privilege escalation, use-after-free, information disclosure, site-isolation, and JIT-miscompilation flaws.
Red Hat published Important advisory RHSA-2026:58897, providing Firefox 140.14.0-1.el9_8 for RHEL 9, including EUS, SAP, four-year update, and Extended Life Cycle streams. It fixes 31 Firefox vulnerabilities, including CVE-2026-74983, CVE-2026-74934, CVE-2026-74953, and CVE-2026-74976.
Red Hat published Important advisory RHSA-2026:58898, delivering Firefox 140.14.0-1.el8_10 for RHEL 8 and RHEL 8.10 Extended Life Cycle variants. The update remediates numerous Firefox flaws including privilege-escalation, use-after-free, site-isolation, mitigation-bypass, and same-origin-policy issues.
SUSE advisory SUSE-SU-2026:3683-1 updated Mozilla Firefox packages on SUSE Linux Enterprise Server 12 to Firefox ESR 140.14.0. The update addresses CVE-2026-74934 through CVE-2026-74990 and CVE-2026-75874, including use-after-free, privilege-escalation, sandbox-escape, and JIT-miscompilation flaws.
Red Hat published Moderate advisory RHSA-2026:49851 for kernel-rt on RHEL 8, fixing CVE-2026-52923, a kernel IPC next_id allocation issue. The update also included KVM s390 and CIFS mount bug fixes and requires affected systems to be rebooted.
A Tenable Nessus plugin linked Rocky Linux security errata RLSA-2026:58898 with multiple related Red Hat Bugzilla tickets. The reference did not provide vulnerability, package, impact, or remediation details.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
9 references tracked. Mallory keeps watching after this page renders.
tenable.com
Open sourcetenable.com
Open sourcetenable.com
Open sourcetenable.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcecwe.mitre.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released multiple Firefox security advisories for **RHEL 7** and several **RHEL 8** support channels, upgrading the browser to **Firefox 115.11.0 ESR** to remediate six Mozilla flaws. The updates cover product streams including RHEL 7 variants and RHEL 8.2, 8.4, and 8.10 across architectures such as `x86_64`, `ppc64le`, `s390x`, and `aarch64`, with severity ratings ranging from **Important** to **Moderate** depending on the platform and channel. The patched issues include **CVE-2024-4777**, a set of memory safety bugs that Mozilla said showed evidence of memory corruption and could potentially lead to arbitrary code execution; **CVE-2024-4770**, a use-after-free that could be triggered while printing or saving pages to PDF; **CVE-2024-4769**, a cross-origin information disclosure side channel in Web Workers; **CVE-2024-4768**, a clickjacking-related permissions bypass involving WebAuthn prompts; and **CVE-2024-4767**, which could leave IndexedDB files behind after private browsing sessions in certain configurations. Red Hat advised customers to apply prerequisite errata where required before installing the Firefox update.
Aug 24, 2026
Red Hat released **RHSA-2026:58550** for `webkit2gtk3` on Red Hat Enterprise Linux 9.2 channels, updating the package to `2.52.5-1.el9_2` and addressing a broad set of WebKitGTK vulnerabilities. The patched issues include **CVE-2026-43701**, an Important-severity sandbox escape that could let a malicious website process restricted content outside the sandbox, along with multiple moderate-severity memory-handling flaws such as **CVE-2026-43699**, **CVE-2026-43716**, and **CVE-2026-39872** that can be triggered by crafted web content and lead to unexpected process crashes. Red Hat said fixes were issued across supported RHEL 7, 8, and 9 product streams through related errata, while older RHEL 6 `pywebkitgtk` and `webkitgtk` packages remain out of support scope and should be assumed affected. The advisory also bundles **CVE-2024-4367**, a Mozilla **PDF.js** flaw caused by a missing type check when handling fonts that can enable arbitrary JavaScript execution in the PDF.js context. Red Hat previously rated that issue Important for affected packages including `firefox`, `thunderbird`, `webkitgtk4`, and `webkit2gtk3`, and linked remediation to multiple RHSA updates across standard, EUS, AUS, and SAP-focused RHEL channels. The WebKitGTK fixes were tied to upstream security work that improved memory handling and addressed improper access control, reducing risks ranging from browser process crashes and denial of service to potential memory corruption, information disclosure, and sandbox bypass.
Aug 26, 2026
Red Hat released **Important** security updates for the Linux kernel across **RHEL 8, RHEL 9, and RHEL 10**, including `kernel-rt` for Real Time deployments, fixing vulnerabilities in core subsystems such as **SMB/CIFS client code, iSCSI target handling, SMC, `sched/psi`, `memfd`, UDF, netfilter, POSIX CPU timers, and AMD GPU drivers**. The advisories cover **nine CVEs in RHEL 8**, **26 CVEs in RHEL 9**, and **24 CVEs in RHEL 10**, with affected offerings spanning standard, Extended Life Cycle, Extended Update Support, SAP, NFV, and CodeReady Linux Builder channels across **x86_64, s390x, ppc64le, and aarch64**. Red Hat said systems should be **rebooted after applying the updates** and reiterated that kernel errata should be treated as security-relevant because of the kernel’s central role. Among the patched flaws, Red Hat detailed **`CVE-2026-53143`**, a **buffer overflow** in the `drm/amdkfd` driver on **GFX11** that could leak or corrupt adjacent GTT memory during CRIU checkpoint and restore operations because SDMA queues used compute-specific handlers with the wrong MQD size. The company also fixed **`CVE-2026-63952`** in **`memfd`**, where writable mappings could persist even when `SEAL_EXEC` implicitly applied `SEAL_WRITE`, weakening the expected write-seal guarantees and undermining **W^X** protections. The RHEL 9 advisory also includes non-security fixes, including a regression in `5.14.0-687.5.1.el9_8` that broke Wi-Fi when **FIPS** was enabled.
Sep 5, 2026