{"schema":"vulnpedia.research/1","cve":"CVE-2026-15718","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2045443","tags":["Permissions Required"],"source":"mitre","sourceId":"mozilla","modified":"2026-07-22T19:19:21.078Z","origins":[{"source":"mitre","sourceId":"mozilla","modified":"2026-07-22T19:19:21.078Z","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2045443"},{"source":"nvd","sourceId":"CVE-2026-15718","modified":"2026-07-22T20:16:48.770","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2045443"}]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-67/","tags":["Vendor Advisory"],"source":"mitre","sourceId":"mozilla","modified":"2026-07-22T19:19:21.078Z","origins":[{"source":"mitre","sourceId":"mozilla","modified":"2026-07-22T19:19:21.078Z","url":"https://www.mozilla.org/security/advisories/mfsa2026-67/"},{"source":"nvd","sourceId":"CVE-2026-15718","modified":"2026-07-22T20:16:48.770","url":"https://www.mozilla.org/security/advisories/mfsa2026-67/"}]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/","tags":[],"source":"mitre","sourceId":"mozilla","modified":"2026-07-22T19:19:21.078Z","origins":[{"source":"mitre","sourceId":"mozilla","modified":"2026-07-22T19:19:21.078Z","url":"https://www.mozilla.org/security/advisories/mfsa2026-70/"},{"source":"nvd","sourceId":"CVE-2026-15718","modified":"2026-07-22T20:16:48.770","url":"https://www.mozilla.org/security/advisories/mfsa2026-70/"}]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/","tags":[],"source":"mitre","sourceId":"mozilla","modified":"2026-07-22T19:19:21.078Z","origins":[{"source":"mitre","sourceId":"mozilla","modified":"2026-07-22T19:19:21.078Z","url":"https://www.mozilla.org/security/advisories/mfsa2026-72/"},{"source":"nvd","sourceId":"CVE-2026-15718","modified":"2026-07-22T20:16:48.770","url":"https://www.mozilla.org/security/advisories/mfsa2026-72/"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15718","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-15718"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499974","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499974"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15718","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-15718"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15718","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15718"}]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-15718","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-15718"}]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-15718","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-15718"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:54248","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:54248"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:54181","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:54181"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:53445","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:53445"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:47101","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:47101"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:49621","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:49621"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:47105","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:47105"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:49922","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:49922"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:53455","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:53455"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:54259","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:54259"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:54339","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:54339"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:54185","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:54185"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:53475","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:53475"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:54182","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:54182"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:53444","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:53444"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:54249","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:54249"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:53446","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:53446"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:47104","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:47104"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:49921","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:49921"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:54180","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:54180"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:53453","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:53453"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:53454","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://access.redhat.com/errata/RHSA-2026:53454"}]},{"source":"euvd","sourceId":"EUVD-2026-43662","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43662","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-43662","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43662"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/SneakyNachos/CVE-2026-15718-who-put-ptrs-in-my-wasm","source":"poc-in-github","sourceId":"CVE-2026-15718","description":"PoC exploit chain for CVE-2026-15718: SpiderMonkey wasm baseline compiler array.fill missing-sync -> invalid pointer -> addrOf/fakeobj -> arbitrary R/W -> RCE","modified":"2026-08-23T16:08:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-15718","url":"https://github.com/SneakyNachos/CVE-2026-15718-who-put-ptrs-in-my-wasm"},{"source":"poc-in-github","sourceId":"CVE-2026-15718","modified":"2026-08-23T16:08:44Z","url":"https://github.com/SneakyNachos/CVE-2026-15718-who-put-ptrs-in-my-wasm"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"7Server-ELS:firefox-0:140.13.0-1.el7_9.ppc64","product":"firefox-0:140.13.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:54248"}],"purl":"pkg:rpm/redhat/firefox@140.13.0-1.el7_9?arch=ppc64","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-10.0.Z.E2S:firefox-0:140.13.0-1.el10_0.src","product":"firefox-0:140.13.0-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:54181"}],"purl":"pkg:rpm/redhat/firefox@140.13.0-1.el10_0?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-10.0.Z.E2S:thunderbird-0:140.13.0-1.el10_0.s390x","product":"thunderbird-0:140.13.0-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:53445"}],"purl":"pkg:rpm/redhat/thunderbird@140.13.0-1.el10_0?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-10.2.Z:firefox-0:140.13.0-1.el10_2.aarch64","product":"firefox-0:140.13.0-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:47101"}],"purl":"pkg:rpm/redhat/firefox@140.13.0-1.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-10.2.Z:firefox-debugsource-0:140.13.0-1.el10_2.s390x","product":"firefox-debugsource-0:140.13.0-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:47101"}],"purl":"pkg:rpm/redhat/firefox-debugsource@140.13.0-1.el10_2?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-10.2.Z:thunderbird-debugsource-0:140.13.0-1.el10_2.aarch64","product":"thunderbird-debugsource-0:140.13.0-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:49621"}],"purl":"pkg:rpm/redhat/thunderbird-debugsource@140.13.0-1.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:firefox-debuginfo-0:140.13.0-1.el8_10.x86_64","product":"firefox-debuginfo-0:140.13.0-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:47105"}],"purl":"pkg:rpm/redhat/firefox-debuginfo@140.13.0-1.el8_10?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:thunderbird-debuginfo-0:140.13.0-1.el8_10.ppc64le","product":"thunderbird-debuginfo-0:140.13.0-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:49922"}],"purl":"pkg:rpm/redhat/thunderbird-debuginfo@140.13.0-1.el8_10?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-8.4.0.Z.AUS:thunderbird-0:140.13.0-1.el8_4.src","product":"thunderbird-0:140.13.0-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:53455"}],"purl":"pkg:rpm/redhat/thunderbird@140.13.0-1.el8_4?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-8.4.0.Z.EUS.EXTENSION:thunderbird-debugsource-0:140.13.0-1.el8_4.x86_64","product":"thunderbird-debugsource-0:140.13.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:53455"}],"purl":"pkg:rpm/redhat/thunderbird-debugsource@140.13.0-1.el8_4?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-8.6.0.Z.EUS.EXTENSION:firefox-debugsource-0:140.13.0-1.el8_6.x86_64","product":"firefox-debugsource-0:140.13.0-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:54259"}],"purl":"pkg:rpm/redhat/firefox-debugsource@140.13.0-1.el8_6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-8.8.0.Z.E4S:firefox-debugsource-0:140.13.0-1.el8_8.x86_64","product":"firefox-debugsource-0:140.13.0-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:54339"}],"purl":"pkg:rpm/redhat/firefox-debugsource@140.13.0-1.el8_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-8.8.0.Z.TUS:firefox-debugsource-0:140.13.0-1.el8_8.x86_64","product":"firefox-debugsource-0:140.13.0-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:54339"}],"purl":"pkg:rpm/redhat/firefox-debugsource@140.13.0-1.el8_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-9.2.0.Z.E4S:firefox-debuginfo-0:140.13.0-1.el9_2.ppc64le","product":"firefox-debuginfo-0:140.13.0-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:54185"}],"purl":"pkg:rpm/redhat/firefox-debuginfo@140.13.0-1.el9_2?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-9.2.0.Z.E4S:thunderbird-0:140.13.0-1.el9_2.ppc64le","product":"thunderbird-0:140.13.0-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:53475"}],"purl":"pkg:rpm/redhat/thunderbird@140.13.0-1.el9_2?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-9.2.0.Z.E4S:thunderbird-debugsource-0:140.13.0-1.el9_2.x86_64","product":"thunderbird-debugsource-0:140.13.0-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:53475"}],"purl":"pkg:rpm/redhat/thunderbird-debugsource@140.13.0-1.el9_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-9.4.0.Z.E4S:firefox-debugsource-0:140.13.0-1.el9_4.ppc64le","product":"firefox-debugsource-0:140.13.0-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:54182"}],"purl":"pkg:rpm/redhat/firefox-debugsource@140.13.0-1.el9_4?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-9.4.0.Z.E4S:thunderbird-0:140.13.0-1.el9_4.x86_64","product":"thunderbird-0:140.13.0-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:53444"}],"purl":"pkg:rpm/redhat/thunderbird@140.13.0-1.el9_4?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-9.6.0.Z.EUS:firefox-0:140.13.0-1.el9_6.src","product":"firefox-0:140.13.0-1.el9_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:54249"}],"purl":"pkg:rpm/redhat/firefox@140.13.0-1.el9_6?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-9.6.0.Z.EUS:firefox-x11-0:140.13.0-1.el9_6.ppc64le","product":"firefox-x11-0:140.13.0-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:54249"}],"purl":"pkg:rpm/redhat/firefox-x11@140.13.0-1.el9_6?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-9.6.0.Z.EUS:thunderbird-debuginfo-0:140.13.0-1.el9_6.x86_64","product":"thunderbird-debuginfo-0:140.13.0-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:53446"}],"purl":"pkg:rpm/redhat/thunderbird-debuginfo@140.13.0-1.el9_6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.13.0-1.el9_8.ppc64le","product":"firefox-debuginfo-0:140.13.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:47104"}],"purl":"pkg:rpm/redhat/firefox-debuginfo@140.13.0-1.el9_8?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:thunderbird-0:140.13.0-1.el9_8.ppc64le","product":"thunderbird-0:140.13.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:49921"}],"purl":"pkg:rpm/redhat/thunderbird@140.13.0-1.el9_8?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:thunderbird-debugsource-0:140.13.0-1.el9_8.x86_64","product":"thunderbird-debugsource-0:140.13.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:49921"}],"purl":"pkg:rpm/redhat/thunderbird-debugsource@140.13.0-1.el9_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"red_hat_enterprise_linux_10:rhel10/firefox-flatpak","product":"rhel10/firefox-flatpak as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/firefox-flatpak?repository_url=registry.redhat.io/rhel10/firefox-flatpak","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"red_hat_enterprise_linux_10:rhel10/thunderbird-flatpak","product":"rhel10/thunderbird-flatpak as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/thunderbird-flatpak?repository_url=registry.redhat.io/rhel10/thunderbird-flatpak","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"red_hat_enterprise_linux_6:firefox","product":"firefox as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/firefox","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"red_hat_enterprise_linux_6:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"red_hat_enterprise_linux_6:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"red_hat_enterprise_linux_6:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"red_hat_enterprise_linux_7:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]},{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json","productId":"red_hat_enterprise_linux_7:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-15718","modified":"2026-08-12T15:49:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15718.json"}]}],"vendorCoverage":{"total":268,"shown":32,"omitted":236,"source":"redhat"}}