Skip to contentMozilla Thunderbird vulnerabilities
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Networking componentCVE-2026-74935Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Graphics: CanvasWebGL componentCVE-2026-74934Fix available7.5 High
- mozilla thunderbirdOff-by-one out of bounds read in MIME header parser for forwardingCVE-2026-14899Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Thunderbird ESR 140.13CVE-2026-16361Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153CVE-2026-16360Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153CVE-2026-16412Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Thunderbird 153CVE-2026-164119.8 Critical
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-164109.8 Critical
- mozilla firefox, thunderbird +1 moreInvalid pointer in the Security: PSM componentCVE-2026-164097.5 High
- mozilla firefox, thunderbird +1 moreInteger overflow in the Audio/Video: Playback componentCVE-2026-164089.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Service Workers componentCVE-2026-164079.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Networking componentCVE-2026-164069.1 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking: WebSockets componentCVE-2026-16405Fix available7.5 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Address Bar componentCVE-2026-164036.5 Medium
- mozilla firefox, thunderbird +1 moreInteger overflow in the Graphics: ImageLib componentCVE-2026-164029.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Data Loss Prevention componentCVE-2026-164018.8 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the DOM: Security componentCVE-2026-164007.5 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Navigation componentCVE-2026-163997.5 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Graphics componentCVE-2026-163987.5 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in WebExtensionsCVE-2026-16396Fix available8.8 High
- mozilla firefox, thunderbird +1 moreInteger overflow in the Audio/Video componentCVE-2026-163959.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security componentCVE-2026-163949.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: GMP componentCVE-2026-16359Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU componentCVE-2026-163939.1 Critical
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-163929.1 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Storage: IndexedDB componentCVE-2026-16391Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Enterprise Policies componentCVE-2026-16390Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions, integer overflow in the Libraries component in NSSCVE-2026-16389Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape in the DOM: Networking componentCVE-2026-163889.8 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Networking componentCVE-2026-16387Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure due to uninitialized memory in the Graphics: WebGPU componentCVE-2026-163867.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure due to uninitialized memory in the Graphics: WebGPU componentCVE-2026-163857.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure due to uninitialized memory in the Graphics: WebGPU componentCVE-2026-163847.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Networking componentCVE-2026-16383Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Service Workers componentCVE-2026-163829.8 Critical
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Networking: DNS componentCVE-2026-16381Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Networking componentCVE-2026-163809.1 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Graphics: WebRender componentCVE-2026-16358Fix available9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Content Processes componentCVE-2026-16379Fix available8.8 High
- mozilla firefox, thunderbird +1 moreOther issue in the DOM: Copy & Paste and Drag & Drop componentCVE-2026-163787.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the PDF Viewer componentCVE-2026-16377Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Graphics: WebGPU componentCVE-2026-163767.5 High
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Networking: HTTP componentCVE-2026-16375Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Framework component in DevToolsCVE-2026-16374Fix available7.5 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Content Processes componentCVE-2026-163728.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Navigation componentCVE-2026-16371Fix available8.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Networking componentCVE-2026-163709.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics componentCVE-2026-16357Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Disability Access APIs componentCVE-2026-16356Fix available9.8 Critical
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-16355Fix available9.8 Critical
- Show moreLoading…