Skip to contentMozilla Thunderbird vulnerabilities
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Widget: Win32 componentCVE-2026-920719.6 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking componentCVE-2026-92070Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreSpoofing issue in the DOM: Navigation componentCVE-2026-92069Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Reader Mode componentCVE-2026-92068Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the Widget: Gtk componentCVE-2026-92067Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape in the Profile Backup componentCVE-2026-920669.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Widget: Win32 componentCVE-2026-920658.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Widget: Win32 componentCVE-2026-920648.8 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Audio/Video componentCVE-2026-920636.5 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Session Restore componentCVE-2026-92062Fix available8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Security: Process Sandboxing componentCVE-2026-920619.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Internationalization componentCVE-2026-92060Fix available8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the DOM: Editor componentCVE-2026-92059Fix available9.3 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics componentCVE-2026-92058Fix available8.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Enterprise Policies componentCVE-2026-92057Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Text componentCVE-2026-92056Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DevTools componentCVE-2026-92055Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Memory componentCVE-2026-92054Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Graphics: CanvasWebGL componentCVE-2026-92053Fix available8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to uninitialized memory in the Graphics: CanvasWebGL componentCVE-2026-92052Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSpoofing issue due to invalid pointer in the Graphics componentCVE-2026-920519.1 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to race condition in the XPConnect componentCVE-2026-920509.1 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Widget: Win32 componentCVE-2026-920498.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Widget: Win32 componentCVE-2026-920489.0 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Crash Reporting componentCVE-2026-92047Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics componentCVE-2026-92046Fix available8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the WebRTC componentCVE-2026-92045Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking: HTTP componentCVE-2026-92044Fix available7.5 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Audio/Video componentCVE-2026-92043Fix available8.8 High
- mozilla firefox, thunderbird +1 moreRace condition in the DOM: Content Processes componentCVE-2026-92042Fix available7.5 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Networking componentCVE-2026-92041Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-920408.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Notifications componentCVE-2026-92039Fix available6.3 Medium
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Remote Settings Client componentCVE-2026-92038Fix available9.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the DOM: Animation componentCVE-2026-920379.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Networking: HTTP componentCVE-2026-920369.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Graphics componentCVE-2026-92035Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the Graphics componentCVE-2026-920349.1 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to invalid pointer in the Graphics componentCVE-2026-92032Fix available9.6 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Graphics: ImageLib componentCVE-2026-92031Fix available6.5 Medium
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Copy & Paste and Drag & Drop componentCVE-2026-92030Fix available5.4 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the SVG componentCVE-2026-92029Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-92028Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Streams componentCVE-2026-92027Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Networking componentCVE-2026-92026Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Navigation componentCVE-2026-92025Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the SVG componentCVE-2026-92024Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the XML componentCVE-2026-92023Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: HTML Parser componentCVE-2026-92022Fix available8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine: JIT componentCVE-2026-92021Fix available8.8 High
- Show moreLoading…