Skip to contentMozilla Thunderbird vulnerabilities
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147CVE-2026-0891Fix available8.1 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the DOM: Copy & Paste and Drag & Drop componentCVE-2026-0890Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreClickjacking issue, information disclosure in the PDF Viewer componentCVE-2026-0887Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics componentCVE-2026-0886Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: GC componentCVE-2026-0885Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine componentCVE-2026-0884Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking componentCVE-2026-0883Fix available5.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the IPC componentCVE-2026-0882Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to integer overflow in the Graphics componentCVE-2026-0880Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics componentCVE-2026-0879Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-0878Fix available8.0 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the DOM: Security componentCVE-2026-0877Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146CVE-2025-14333Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 146 and Thunderbird 146CVE-2025-143327.3 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Request Handling componentCVE-2025-14331Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2025-14330Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor componentCVE-2025-14329Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor componentCVE-2025-14328Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Downloads Panel componentCVE-2025-14327Fix available7.5 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video: GMP componentCVE-2025-143269.8 Critical
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2025-14325Public exploitFix available7.3 High
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2025-14324Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Notifications componentCVE-2025-14323Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2025-14322Fix available8.0 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the WebRTC: Signaling componentCVE-2025-14321Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 145 and Thunderbird 145CVE-2025-130278.1 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the WebRTC: Audio/Video componentCVE-2025-13020Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DOM: Workers componentCVE-2025-13019Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2025-13018Fix available8.1 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DOM: Notifications componentCVE-2025-13017Fix available8.1 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebGPU componentCVE-2025-130269.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU componentCVE-2025-130257.5 High
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2025-130249.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript: WebAssembly componentCVE-2025-13016Fix available7.5 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebGPU componentCVE-2025-130239.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU componentCVE-2025-130229.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU componentCVE-2025-130219.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video componentCVE-2025-13014Fix available8.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Core & HTML componentCVE-2025-13013Fix available6.1 Medium
- mozilla firefox, thunderbird +1 moreRace condition in the Graphics componentCVE-2025-13012Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Firefox 144 and Thunderbird 144CVE-2025-117219.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free caused by the native messaging web extension API on WindowsCVE-2025-117199.8 Critical
- mozilla firefox, thunderbird +1 moreSandboxed iframes allowed links to open in external apps (Android only)CVE-2025-117166.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144CVE-2025-11715Fix available8.8 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144CVE-2025-11714Fix available8.8 High
- mozilla firefox, thunderbird +1 morePotential user-assisted code execution in “Copy as cURL” commandCVE-2025-11713Fix available8.1 High
- mozilla firefox, thunderbird +1 moreAn OBJECT tag type attribute overrode browser behavior on web resources without a content-typeCVE-2025-11712Fix available6.1 Medium
- mozilla firefox, thunderbird +1 moreSome non-writable Object properties could be modifiedCVE-2025-11711Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreCross-process information leaked due to malicious IPC messagesCVE-2025-11710Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreOut of bounds read/write in a privileged process triggered by WebGL texturesCVE-2025-11709Fix available9.8 Critical
- Show moreLoading…