Skip to contentMozilla Thunderbird vulnerabilities
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript: WebAssembly componentCVE-2026-28017.5 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the WebAuthn component in Firefox for AndroidCVE-2026-28009.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-27999.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-27988.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the JavaScript: GC componentCVE-2026-27979.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreJIT miscompilation in the JavaScript: WebAssembly componentCVE-2026-2796Public exploit9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the JavaScript: GC componentCVE-2026-27959.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148CVE-2026-2793Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148CVE-2026-2792Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Networking: Cache componentCVE-2026-2791Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Networking: JAR componentCVE-2026-2790Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: ImageLib componentCVE-2026-2789Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: GMP componentCVE-2026-2788Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Window and Location componentCVE-2026-2787Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine componentCVE-2026-2786Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreInvalid pointer in the JavaScript Engine componentCVE-2026-2785Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-2784Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure due to JIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-2783Fix available7.5 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor componentCVE-2026-2782Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreInteger overflow in the Libraries component in NSSCVE-2026-2781Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor componentCVE-2026-2780Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Networking: JAR componentCVE-2026-2779Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the DOM: Core & HTML componentCVE-2026-2778Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 morePrivilege escalation in the Messaging System componentCVE-2026-2777Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Telemetry component in External SoftwareCVE-2026-2776Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the DOM: HTML Parser componentCVE-2026-2775Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreInteger overflow in the Audio/Video componentCVE-2026-2774Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Web Audio componentCVE-2026-2773Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Audio/Video: Playback componentCVE-2026-2772Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUndefined behavior in the DOM: Core & HTML componentCVE-2026-2771Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the DOM: Bindings (WebIDL) componentCVE-2026-2770Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Storage: IndexedDB componentCVE-2026-2769Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Storage: IndexedDB componentCVE-2026-2768Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-2767Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine: JIT componentCVE-2026-2766Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine componentCVE-2026-2765Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreJIT miscompilation, use-after-free in the JavaScript Engine: JIT componentCVE-2026-2764Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine componentCVE-2026-2763Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreInteger overflow in the JavaScript: Standard Library componentCVE-2026-2762Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Graphics: WebRender componentCVE-2026-2761Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebRender componentCVE-2026-2760Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Graphics: ImageLib componentCVE-2026-2759Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript: GC componentCVE-2026-2758Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the WebRTC: Audio/Video componentCVE-2026-2757Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat ai inference server 3.3 +18 more +20 moreHeap buffer overflow in libvpxCVE-2026-2447Fix available8.8 High
- mozilla thunderbirdCSS-based exfiltration of the content from partially encrypted emails when allowing remote contentCVE-2026-0818Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 147 and Thunderbird 147CVE-2026-08929.8 Critical
- mozilla firefox, thunderbird +1 moreDenial-of-service in the DOM: Service Workers componentCVE-2026-08897.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the XML componentCVE-2026-08885.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreSandbox escape in the Messaging System componentCVE-2026-088110.0 Critical
- Show moreLoading…