Mozilla Thunderbird vulnerabilities

• mozilla thunderbird Matrix homeserver could redirect the chat session to a local file or network share CVE-2026-118180 Fix available 7.5 HighOctober 27, 2026
• mozilla thunderbird Request forgery via news: links CVE-2026-118179 Fix available 8.8 HighOctober 27, 2026
• mozilla thunderbird RSS feed could redirect its subscription to a local file or network share CVE-2026-118178 Fix available 5.7 MediumOctober 27, 2026
• mozilla thunderbird Calendar discovery accepted local file and remote network share locations CVE-2026-118177 Fix available 9.1 CriticalOctober 27, 2026
• mozilla thunderbird Bypass of remote UNC path restriction in mailbox: URLs CVE-2026-118176 Fix available 8.1 HighOctober 27, 2026
• mozilla thunderbird Content of other messages could be included when replying to a crafted message CVE-2026-118175 Fix available 7.5 HighOctober 27, 2026
• mozilla thunderbird Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment CVE-2026-118174 Fix available 6.5 MediumOctober 27, 2026
• mozilla firefox, thunderbird +1 more Invalid pointer in the JavaScript: GC component CVE-2026-118026 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Other issue in the SVG component CVE-2026-118025 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Graphics: Text component CVE-2026-118024 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Sandbox escape due to use-after-free in the Graphics: WebRender component CVE-2026-118023 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Sandbox escape due to use-after-free in the Disability Access APIs component CVE-2026-118022 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Sandbox escape due to use-after-free in the XPCOM component CVE-2026-118021 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Layout component CVE-2026-118020 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Race condition, use-after-free in the DOM: File component CVE-2026-118019 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the SVG component CVE-2026-118017 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the DOM: Core & HTML component CVE-2026-118016 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the DOM: Core & HTML component CVE-2026-118015 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the JavaScript Engine: JIT component CVE-2026-118014 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Layout: Images, Video, and HTML Frames component CVE-2026-118013 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the DOM: Animation component CVE-2026-118012 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Frame poisoning in the CSS Parsing and Computation component CVE-2026-118011 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Disability Access APIs component CVE-2026-118010 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Integer overflow, use-after-free in the Graphics: Text component CVE-2026-118009 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Privilege escalation in the DOM: Navigation component CVE-2026-118008 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the JavaScript: GC component CVE-2026-118007 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Privilege escalation due to use-after-free in the WebRTC: Signaling component CVE-2026-118006 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the WebRTC: Signaling component CVE-2026-118005 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Incorrect boundary conditions in the CSS Transitions and Animations component CVE-2026-118004 Fix available 8.1 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Information disclosure in the Networking: DNS component CVE-2026-118003 Fix available 8.1 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Information disclosure due to race condition in the Networking component CVE-2026-118002 Fix available 8.1 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Information disclosure in the Networking: HTTP component CVE-2026-118000 Fix available 8.1 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Race condition in the IPC component CVE-2026-117999 Fix available 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Mitigation bypass in the DOM: Push Subscriptions component CVE-2026-117998 Fix available 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Sandbox escape due to use-after-free in the Widget component CVE-2026-117997 Fix available 9.6 CriticalOctober 27, 2026
• mozilla firefox, thunderbird +1 more Incorrect boundary conditions in the WebRTC component CVE-2026-117996 Fix available 8.1 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Privilege escalation in the DOM: UI Events & Focus Handling component CVE-2026-117995 Fix available 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the JavaScript: GC component CVE-2026-117994 Fix available 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Integer overflow in the Graphics: Text component CVE-2026-117993 Fix available 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Information disclosure in the CSS Parsing and Computation component CVE-2026-117992 Fix available 6.5 MediumOctober 27, 2026
• mozilla firefox, thunderbird +1 more Incorrect boundary conditions in the Layout: Text and Fonts component CVE-2026-117991 Fix available 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component CVE-2026-117990 Fix available 9.6 CriticalOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Graphics component CVE-2026-117989 Fix available 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-117988 Fix available 9.6 CriticalOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Graphics component CVE-2026-117987 Fix available 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Graphics component CVE-2026-117986 Fix available 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Sandbox escape due to use-after-free in the Graphics component CVE-2026-117985 Fix available 9.6 CriticalOctober 27, 2026
• mozilla firefox, thunderbird +1 more Incorrect boundary conditions in the Layout: Scrolling and Overflow component CVE-2026-117984 Fix available 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Use-after-free in the Graphics component CVE-2026-117983 Fix available 8.8 HighOctober 27, 2026
• mozilla firefox, thunderbird +1 more Invalid pointer in the JavaScript Engine: JIT component CVE-2026-117982 Fix available 9.8 CriticalOctober 27, 2026
• Show olderLoading…