Mozilla Thunderbird

• CVE-2026-16376 High 7.5 Denial-of-service in the Graphics: WebGPU component 0.5%
• CVE-2026-16375 Critical 9.8 Site isolation issue in the Networking: HTTP component 0.3%
• CVE-2026-16374 High 7.5 Information disclosure in the Framework component in DevTools 0.4%
• CVE-2026-16372 High 8.8 Privilege escalation in the DOM: Content Processes component 0.4%
• CVE-2026-16371 High 8.8 Privilege escalation in the DOM: Navigation component 0.4%
• CVE-2026-16370 Critical 9.1 Mitigation bypass in the DOM: Networking component 0.4%
• CVE-2026-16357 Critical 9.8 Incorrect boundary conditions in the Graphics component 0.9%
• CVE-2026-16356 Critical 9.8 Sandbox escape due to use-after-free in the Disability Access APIs component 0.6%
• CVE-2026-16355 Critical 9.8 JIT miscompilation in the JavaScript Engine: JIT component 0.6%
• CVE-2026-16369 Critical 9.8 Integer overflow in the JavaScript: WebAssembly component 0.6%
• CVE-2026-16368 Critical 9.8 Incorrect boundary conditions in the JavaScript: WebAssembly component 0.4%
• CVE-2026-16367 Critical 10.0 Sandbox escape due to invalid pointer in the Disability Access APIs component 0.4%
• CVE-2026-16354 High 7.5 Information disclosure in the Graphics: ImageLib component 0.5%
• CVE-2026-16353 Critical 9.8 Invalid pointer in the DOM: Bindings (WebIDL) component 0.6%
• CVE-2026-16366 High 8.8 Privilege escalation in the DOM: Navigation component 0.4%
• CVE-2026-16365 High 8.8 Privilege escalation in the DOM: Workers component 0.3%
• CVE-2026-16364 Critical 9.1 Incorrect boundary conditions in the Audio/Video: Playback component 0.4%
• CVE-2026-16363 Critical 9.8 JIT miscompilation in the JavaScript: WebAssembly component 0.6%
• CVE-2026-16352 Critical 9.8 Sandbox escape due to use-after-free in the Disability Access APIs component 0.6%
• CVE-2026-16351 Critical 9.8 Sandbox escape due to use-after-free in the DOM: Navigation component 0.6%
• CVE-2026-16362 High 8.8 Use-after-free in the WebRTC: Audio/Video component 0.4%
• CVE-2026-16350 Critical 9.8 Incorrect boundary conditions in the Audio/Video: cubeb component 0.6%
• CVE-2026-16349 Critical 9.8 Same-origin policy bypass in the DOM: Navigation component 0.3%
• CVE-2026-15719 Medium 5.4 Site isolation issue in the DOM: Navigation component 0.3%
• CVE-2026-15718 Medium 4.3 Invalid pointer in the JavaScript: WebAssembly component 0.3%
• CVE-2026-57963 Medium 6.5 Chat UI manipulation by injection 0.3%
• CVE-2026-57962 Medium 5.3 Denial-of-service via malicious LDAP address-book server 0.3%
• CVE-2026-12330 Medium 5.4 Incorrect boundary conditions in the Internationalization component 0.2%
• CVE-2026-12329 Medium 5.3 Memory safety bug fixed in Thunderbird ESR 140.12 0.3%
• CVE-2026-12328 High 8.1 Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 0.5%
• CVE-2026-12327 High 8.1 Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 0.4%
• CVE-2026-12326 High 8.1 Memory safety bugs fixed in Firefox 152 and Thunderbird 152 0.4%
• CVE-2026-12325 Medium 6.5 Denial-of-service in the Graphics: ImageLib component 0.2%
• CVE-2026-12324 High 7.3 Incorrect boundary conditions in the Graphics: CanvasWebGL component 0.2%
• CVE-2026-12323 Medium 5.4 Spoofing issue in the DOM: Core & HTML component 0.2%
• CVE-2026-12322 Medium 5.4 Clickjacking issue in the Widget: Gtk component 0.2%
• CVE-2026-12321 Medium 5.4 JIT miscompilation in the JavaScript: WebAssembly component 0.2%
• CVE-2026-12320 Medium 4.3 Information disclosure in the Password Manager component 0.2%
• CVE-2026-12319 Medium 6.5 Denial-of-service in the Audio/Video: Playback component 0.2%
• CVE-2026-12318 High 7.3 Incorrect boundary conditions in the Libraries component in NSS 0.3%
• CVE-2026-12317 High 7.5 Memory safety bug fixed in Thunderbird 152 0.3%
• CVE-2026-12316 Critical 9.1 Mitigation bypass in the DOM: Security component 0.2%
• CVE-2026-12315 Critical 9.1 Mitigation bypass in the DOM: Security component 0.3%
• CVE-2026-12314 High 7.5 Memory safety bug fixed in Thunderbird 152 0.3%
• CVE-2026-12313 Medium 4.7 Information disclosure, sandbox escape in the Security: Process Sandboxing component 0.2%
• CVE-2026-12312 High 7.5 Memory safety bug fixed in Thunderbird 152 0.3%
• CVE-2026-12311 Medium 4.7 Information disclosure, sandbox escape in the Security: Process Sandboxing component 0.2%
• CVE-2026-12310 High 7.5 Memory safety bug fixed in Thunderbird 152 0.3%
• CVE-2026-12309 Medium 6.5 Memory safety bug fixed in Thunderbird 152 0.2%
• CVE-2026-12308 Medium 5.3 Memory safety bug fixed in Thunderbird 152 0.3%