Mozilla Thunderbird

• CVE-2026-84118 Medium 5.4 Use-after-free in the JavaScript: GC component 0.3%
• CVE-2026-84145 High 7.5 Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15 0.4%
• CVE-2026-84131 High 8.8 Privilege escalation due to invalid pointer in the Graphics component 0.3%
• CVE-2026-84121 Critical 9.6 Sandbox escape due to use-after-free in the DOM: Security component 0.3%
• CVE-2026-84120 Medium 5.4 Use-after-free in the Audio/Video component 0.2%
• CVE-2026-84119 Critical 9.6 Sandbox escape due to use-after-free in the DOM: Navigation component 0.3%
• CVE-2026-74989 Critical 9.8 Internally found bugs fixed in Firefox 154 0.6%
• CVE-2026-74988 Critical 9.8 Internally found bugs fixed in Firefox ESR 153.1 and Firefox 154 0.6%
• CVE-2026-74986 Critical 9.1 Site isolation issue in the CSS Parsing and Computation component 0.6%
• CVE-2026-74985 Critical 9.8 Privilege escalation in the Enterprise Policies component 0.5%
• CVE-2026-74984 Medium 6.8 Race condition in the JavaScript Engine component 0.3%
• CVE-2026-74982 High 7.5 Denial-of-service in the Widget component 0.5%
• CVE-2026-74981 High 8.1 Site isolation issue in the Audio/Video: Web Codecs component 0.2%
• CVE-2026-74979 Critical 9.8 Mitigation bypass in the Add-ons Manager component 0.3%
• CVE-2026-74978 High 8.1 Clickjacking issue in the Widget component 0.4%
• CVE-2026-74977 High 7.5 Integer overflow in the Graphics component 0.6%
• CVE-2026-74970 Medium 5.4 Site isolation issue in the Graphics component 0.2%
• CVE-2026-74968 Medium 5.4 Site isolation issue in the Graphics: WebRender component 0.2%
• CVE-2026-74966 High 7.5 Information disclosure in the Form Autofill component 0.4%
• CVE-2026-74961 Critical 9.1 Side-channel in the Web Audio component 0.4%
• CVE-2026-74958 High 7.5 Information disclosure in the WebRTC component 0.5%
• CVE-2026-74956 Critical 9.1 Same-origin policy bypass in the DOM: Service Workers component 0.5%
• CVE-2026-74955 High 8.8 Privilege escalation in the Request Handling component 0.4%
• CVE-2026-74954 High 7.5 Information disclosure due to side-channel in the Storage: Cache API component 0.4%
• CVE-2026-74952 High 8.8 Privilege escalation in the Application Update component 0.4%
• CVE-2026-74950 High 8.8 Privilege escalation in the Downloads API component 0.4%
• CVE-2026-74947 High 8.8 Privilege escalation due to invalid pointer in the Graphics component 0.4%
• CVE-2026-74938 Critical 9.1 Mitigation bypass in the JavaScript: GC component 0.4%
• CVE-2026-74937 High 8.8 Use-after-free in the JavaScript: GC component 0.4%
• CVE-2026-75874 Critical 10.0 Sandbox escape in the Remote Settings Client component 0.5%
• CVE-2026-74990 Critical 9.8 Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 0.7%
• CVE-2026-74987 Critical 9.8 Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 0.7%
• CVE-2026-74983 High 8.1 Mitigation bypass in the Data Loss Prevention component 0.4%
• CVE-2026-74976 Medium 6.5 JIT miscompilation in the JavaScript Engine: JIT component 0.4%
• CVE-2026-74974 Medium 5.4 Same-origin policy bypass in the Graphics: ImageLib component 0.2%
• CVE-2026-74973 Medium 4.2 Race condition, use-after-free in the Graphics component 0.2%
• CVE-2026-74972 Medium 4.3 Information disclosure in the DOM: Push Subscriptions component 0.3%
• CVE-2026-74971 Medium 4.3 Information disclosure in the DOM: UI Events & Focus Handling component 0.3%
• CVE-2026-74969 High 8.8 Race condition, use-after-free in the Layout: Text and Fonts component 0.5%
• CVE-2026-74967 Medium 5.4 Same-origin policy bypass in the Audio/Video: Playback component 0.2%
• CVE-2026-74965 High 8.8 Privilege escalation in the Shell Integration component 0.4%
• CVE-2026-74964 Critical 9.8 Integer overflow in the Graphics component 0.7%
• CVE-2026-74963 Medium 5.4 Same-origin policy bypass in the Networking: Cookies component 0.2%
• CVE-2026-74962 High 8.1 Site isolation issue in the Networking: Cookies component 0.2%
• CVE-2026-74960 High 8.1 Site isolation issue in the WebExtensions component 0.2%
• CVE-2026-74959 Critical 9.1 Mitigation bypass in the Storage: Cache API component 0.5%
• CVE-2026-74957 High 8.1 Mitigation bypass in the Safe Browsing component 0.4%
• CVE-2026-74953 High 8.8 Privilege escalation in the Networking: Cookies component 0.4%
• CVE-2026-74949 High 8.8 Use-after-free in the Graphics: Canvas2D component 0.5%
• CVE-2026-74948 Medium 6.5 Information disclosure in the Graphics component 0.4%