Mozilla Thunderbird

• CVE-2026-74946 High 8.8 Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.5%
• CVE-2026-74945 Medium 6.5 Information disclosure in the Graphics: Text component 0.4%
• CVE-2026-74944 Critical 9.8 Use-after-free in the DOM: Core & HTML component 0.6%
• CVE-2026-74943 Critical 9.8 Use-after-free in the Graphics: ImageLib component 0.6%
• CVE-2026-74942 High 8.8 Privilege escalation in the Remote Settings Client component 0.5%
• CVE-2026-74941 High 8.8 Privilege escalation in the Graphics: CanvasWebGL component 0.5%
• CVE-2026-74940 Critical 9.8 Use-after-free in the Graphics: Text component 0.6%
• CVE-2026-74939 High 8.8 Privilege escalation in the DOM: Navigation component 0.5%
• CVE-2026-74936 Critical 9.8 Use-after-free in the JavaScript: WebAssembly component 0.6%
• CVE-2026-74935 High 8.8 Privilege escalation in the DOM: Networking component 0.5%
• CVE-2026-74934 High 7.5 Site isolation issue in the Graphics: CanvasWebGL component 0.2%
• CVE-2026-14899 High 7.5 Off-by-one out of bounds read in MIME header parser for forwarding 0.5%
• CVE-2026-16361 Critical 9.8 Memory safety bugs fixed in Thunderbird ESR 140.13 0.6%
• CVE-2026-16360 Critical 9.8 Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153 0.5%
• CVE-2026-16412 Critical 9.8 Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153 0.6%
• CVE-2026-16411 Critical 9.8 Memory safety bugs fixed in Thunderbird 153 0.5%
• CVE-2026-16410 Critical 9.8 JIT miscompilation in the JavaScript Engine: JIT component 0.6%
• CVE-2026-16409 High 7.5 Invalid pointer in the Security: PSM component 0.5%
• CVE-2026-16408 Critical 9.8 Integer overflow in the Audio/Video: Playback component 0.6%
• CVE-2026-16407 Critical 9.8 Mitigation bypass in the DOM: Service Workers component 0.5%
• CVE-2026-16406 Critical 9.1 Mitigation bypass in the Networking component 0.4%
• CVE-2026-16405 High 7.5 Information disclosure in the Networking: WebSockets component 0.4%
• CVE-2026-16403 Medium 6.5 Spoofing issue in the Address Bar component 0.4%
• CVE-2026-16402 Critical 9.8 Integer overflow in the Graphics: ImageLib component 0.6%
• CVE-2026-16401 High 8.8 Privilege escalation in the Data Loss Prevention component 0.4%
• CVE-2026-16400 High 7.5 Information disclosure in the DOM: Security component 0.4%
• CVE-2026-16399 High 7.5 Site isolation issue in the DOM: Navigation component 0.2%
• CVE-2026-16398 High 7.5 Site isolation issue in the Graphics component 0.2%
• CVE-2026-16396 High 8.8 Privilege escalation in WebExtensions 0.5%
• CVE-2026-16395 Critical 9.8 Integer overflow in the Audio/Video component 0.6%
• CVE-2026-16394 Critical 9.1 Mitigation bypass in the DOM: Security component 0.4%
• CVE-2026-16359 Critical 9.1 Incorrect boundary conditions in the Audio/Video: GMP component 0.5%
• CVE-2026-16393 Critical 9.1 Incorrect boundary conditions in the Graphics: WebGPU component 0.5%
• CVE-2026-16392 Critical 9.1 JIT miscompilation in the JavaScript Engine: JIT component 0.5%
• CVE-2026-16391 High 7.5 Information disclosure in the Storage: IndexedDB component 0.4%
• CVE-2026-16390 Critical 9.1 Mitigation bypass in the Enterprise Policies component 0.4%
• CVE-2026-16389 Critical 9.8 Incorrect boundary conditions, integer overflow in the Libraries component in NSS 0.6%
• CVE-2026-16388 Critical 9.8 Sandbox escape in the DOM: Networking component 0.6%
• CVE-2026-16387 Critical 9.8 Site isolation issue in the Networking component 0.3%
• CVE-2026-16386 High 7.5 Information disclosure due to uninitialized memory in the Graphics: WebGPU component 0.4%
• CVE-2026-16385 High 7.5 Information disclosure due to uninitialized memory in the Graphics: WebGPU component 0.4%
• CVE-2026-16384 High 7.5 Information disclosure due to uninitialized memory in the Graphics: WebGPU component 0.4%
• CVE-2026-16383 Critical 9.8 Mitigation bypass in the DOM: Networking component 0.6%
• CVE-2026-16382 Critical 9.8 Mitigation bypass in the DOM: Service Workers component 0.6%
• CVE-2026-16381 Critical 9.1 Same-origin policy bypass in the Networking: DNS component 0.2%
• CVE-2026-16380 Critical 9.1 Mitigation bypass in the Networking component 0.3%
• CVE-2026-16358 Critical 9.8 Site isolation issue in the Graphics: WebRender component 0.3%
• CVE-2026-16379 High 8.8 Privilege escalation in the DOM: Content Processes component 0.4%
• CVE-2026-16378 High 7.5 Other issue in the DOM: Copy & Paste and Drag & Drop component 0.4%
• CVE-2026-16377 Critical 9.8 Mitigation bypass in the PDF Viewer component 0.6%