Thunderbird

thunderbird

Vendor: Mozilla • 2,068 CVEs

CVEs (2,068)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-14899 1Mozilla 1Thunderbird Oct 24, 2026 Jul 22, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the he...Show more The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in Thunderbird 153 and Thunderbird 140.13.Show less
CVE-2026-16410 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16409 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16407 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16403 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16402 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16401 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16400 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16399 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16398 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16396 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16393 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16392 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 9.1 CRITICAL· v3 N/A· v2 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16391 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16390 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16389 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16388 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16387 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16386 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16385 1Mozilla 2Firefox Thunderbird Oct 24, 2026 Jul 21, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Previous 1...121314...104 Next