Skip to contentMozilla Thunderbird vulnerabilities
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12298Fix available5.4 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape due to incorrect boundary conditions in the Networking componentCVE-2026-12297Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the Security: Process Sandboxing componentCVE-2026-12296Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the DOM: Navigation componentCVE-2026-12295Public exploitFix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the DOM: Workers componentCVE-2026-12294Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the Graphics: WebGPU componentCVE-2026-122939.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the Web Audio componentCVE-2026-12292Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the Networking: HTTP componentCVE-2026-12291Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12290Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 morePrivilege escalation in the Graphics: WebRender componentCVE-2026-12289Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Thunderbird 151CVE-2026-89738.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the WebRTC: Audio/Video componentCVE-2026-89728.8 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Networking: JAR componentCVE-2026-89716.5 Medium
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-89698.1 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Graphics: WebGPU componentCVE-2026-89677.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the IP Protection componentCVE-2026-89667.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the DOM: Security componentCVE-2026-89657.5 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Popup Blocker componentCVE-2026-89647.5 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Web Speech componentCVE-2026-89637.5 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in WebExtensionsCVE-2026-89607.5 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Application Update componentCVE-2026-89528.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreSame-origin policy bypass in the DOM: Networking componentCVE-2026-89489.1 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151CVE-2026-8975Fix available8.8 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151CVE-2026-8974Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Security componentCVE-2026-8970Fix available8.8 High
- mozilla firefox, thunderbird +1 moreDenial-of-service due to invalid pointer in the Audio/Video: Web Codecs componentCVE-2026-8968Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-8962Fix available8.1 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Form Autofill componentCVE-2026-8961Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Widget: Win32 componentCVE-2026-89599.6 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure, sandbox escape in the Security: Process Sandboxing componentCVE-2026-8958Fix available8.6 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Enterprise Policies componentCVE-2026-8957Fix available8.8 High
- mozilla firefox, thunderbird +1 moreInteger overflow in the Networking: JAR componentCVE-2026-8956Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Workers componentCVE-2026-8955Fix available8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions, integer overflow in the Audio/Video componentCVE-2026-8954Fix available7.5 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Disability Access APIs componentCVE-2026-8953Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Networking: HTTP componentCVE-2026-8950Fix available9.3 Critical
- mozilla firefox, thunderbird +1 moreInteger overflow in the Widget: Win32 componentCVE-2026-89497.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the DOM: Bindings (WebIDL) componentCVE-2026-8947Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the Audio/Video: Web Codecs componentCVE-2026-8946Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the Profile Backup componentCVE-2026-8401Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreOther issue in the JavaScript Engine componentCVE-2026-8391Fix available5.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the JavaScript Engine: JIT componentCVE-2026-8388Public exploitFix available6.5 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreOther issue in the WebRTC componentCVE-2026-8094Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Thunderbird 150.0.2CVE-2026-80938.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2CVE-2026-8092Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreIncorrect boundary conditions in the Audio/Video: Playback componentCVE-2026-8091Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the DOM: Networking componentCVE-2026-8090Fix available7.3 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the WebRTC: Networking componentCVE-2026-7321Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Thunderbird 150.0.1CVE-2026-73247.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreMemory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1CVE-2026-7323Fix available7.3 High
- Show moreLoading…