Skip to contentMozilla Thunderbird vulnerabilities
- mozilla firefox, thunderbird +1 moreInteger overflow in the JavaScript: WebAssembly componentCVE-2026-16369Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript: WebAssembly componentCVE-2026-16368Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to invalid pointer in the Disability Access APIs componentCVE-2026-1636710.0 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Graphics: ImageLib componentCVE-2026-16354Fix available7.5 High
- mozilla firefox, thunderbird +1 moreInvalid pointer in the DOM: Bindings (WebIDL) componentCVE-2026-16353Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Navigation componentCVE-2026-163668.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Workers componentCVE-2026-16365Fix available8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: Playback componentCVE-2026-163649.1 Critical
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript: WebAssembly componentCVE-2026-16363Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Disability Access APIs componentCVE-2026-16352Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the DOM: Navigation componentCVE-2026-16351Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the WebRTC: Audio/Video componentCVE-2026-16362Fix available8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: cubeb componentCVE-2026-16350Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DOM: Navigation componentCVE-2026-16349Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Navigation componentCVE-2026-15719Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreInvalid pointer in the JavaScript: WebAssembly componentCVE-2026-15718Public exploitFix available4.3 Medium
- mozilla thunderbirdChat UI manipulation by injectionCVE-2026-57963Fix available6.5 Medium
- mozilla thunderbirdDenial-of-service via malicious LDAP address-book serverCVE-2026-57962Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Internationalization componentCVE-2026-12330Fix available5.4 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird ESR 140.12CVE-2026-12329Fix available5.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152CVE-2026-12328Fix available8.1 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152CVE-2026-12327Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 152 and Thunderbird 152CVE-2026-123268.1 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Graphics: ImageLib componentCVE-2026-12325Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-12324Fix available7.3 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the DOM: Core & HTML componentCVE-2026-123235.4 Medium
- mozilla firefox, thunderbird +1 moreClickjacking issue in the Widget: Gtk componentCVE-2026-123225.4 Medium
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript: WebAssembly componentCVE-2026-123215.4 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Password Manager componentCVE-2026-123204.3 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Audio/Video: Playback componentCVE-2026-123196.5 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Libraries component in NSSCVE-2026-12318Fix available7.3 High
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-123177.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-123169.1 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-12315Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12314Fix available7.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure, sandbox escape in the Security: Process Sandboxing componentCVE-2026-12313Fix available4.7 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12312Fix available7.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure, sandbox escape in the Security: Process Sandboxing componentCVE-2026-12311Fix available4.7 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12310Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12309Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12308Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12307Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12306Fix available5.3 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12305Fix available7.5 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Networking: Cookies componentCVE-2026-12304Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure due to incorrect boundary conditions in the Graphics: WebGPU componentCVE-2026-123034.3 Medium
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-12302Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-123015.3 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Thunderbird 152CVE-2026-123005.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreJIT miscompilation in the DOM: Core & HTML componentCVE-2026-12299Fix available5.4 Medium
- Show moreLoading…