Mozilla Thunderbird

• CVE-2026-6746 High 7.5 Use-after-free in the DOM: Core & HTML component 0.9%
• CVE-2026-5735 High 8.1 Memory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2 0.3%
• CVE-2026-5734 High 8.1 Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 0.3%
• CVE-2026-5733 High 8.8 Incorrect boundary conditions in the Graphics: WebGPU component 0.3%
• CVE-2026-5732 High 8.8 Incorrect boundary conditions, integer overflow in the Graphics: Text component 0.4%
• CVE-2026-5731 Critical 9.8 Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 0.4%
• CVE-2026-4371 High 7.4 Out of bounds read in IMAP parsing 0.4%
• CVE-2026-3889 Medium 6.5 Spoofing issue in Thunderbird 0.2%
• CVE-2026-4721 Critical 9.8 Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 0.4%
• CVE-2026-4729 Critical 9.8 Memory safety bugs fixed in Firefox 149 and Thunderbird 149 0.3%
• CVE-2026-4720 Critical 9.8 Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 0.4%
• CVE-2026-4719 High 7.5 Incorrect boundary conditions in the Graphics: Text component 0.4%
• CVE-2026-4718 High 8.1 Undefined behavior in the WebRTC: Signaling component 0.5%
• CVE-2026-4728 Medium 6.5 Spoofing issue in the Privacy: Anti-Tracking component 0.2%
• CVE-2026-4727 High 7.5 Denial-of-service in the Libraries component in NSS 0.6%
• CVE-2026-4726 High 7.5 Denial-of-service in the XML component 0.6%
• CVE-2026-4717 Critical 9.8 Privilege escalation in the Netmonitor component 0.4%
• CVE-2026-4716 Critical 9.1 Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component 0.4%
• CVE-2026-4715 Critical 9.1 Uninitialized memory in the Graphics: Canvas2D component 0.4%
• CVE-2026-4714 High 7.5 Incorrect boundary conditions in the Audio/Video component 0.4%
• CVE-2026-4713 High 7.5 Incorrect boundary conditions in the Graphics component 0.4%
• CVE-2026-4712 High 7.5 Information disclosure in the Widget: Cocoa component 0.4%
• CVE-2026-4725 Critical 9.3 Sandbox escape due to use-after-free in the Graphics: Canvas2D component 0.3%
• CVE-2026-4711 Critical 9.8 Use-after-free in the Widget: Cocoa component 0.4%
• CVE-2026-4710 Critical 9.8 Incorrect boundary conditions in the Audio/Video component 0.4%
• CVE-2026-4709 High 7.5 Incorrect boundary conditions in the Audio/Video: GMP component 0.5%
• CVE-2026-4708 High 7.5 Incorrect boundary conditions in the Graphics component 0.4%
• CVE-2026-4707 High 7.5 Incorrect boundary conditions in the Graphics: Canvas2D component 0.6%
• CVE-2026-4706 High 7.5 Incorrect boundary conditions in the Graphics: Canvas2D component 0.5%
• CVE-2026-4705 Critical 9.8 Undefined behavior in the WebRTC: Signaling component 0.7%
• CVE-2026-4704 High 7.5 Denial-of-service in the WebRTC: Signaling component 0.7%
• CVE-2026-4724 Critical 9.1 Undefined behavior in the Audio/Video component 0.5%
• CVE-2026-4723 Critical 9.8 Use-after-free in the JavaScript Engine component 0.6%
• CVE-2026-4702 Critical 9.8 JIT miscompilation in the JavaScript Engine component 0.7%
• CVE-2026-4722 High 8.8 Privilege escalation in the IPC component 0.3%
• CVE-2026-4701 Critical 9.8 Use-after-free in the JavaScript Engine component 0.5%
• CVE-2026-4700 Critical 9.8 Mitigation bypass in the Networking: HTTP component 0.9%
• CVE-2026-4699 High 7.5 Incorrect boundary conditions in the Layout: Text and Fonts component 0.7%
• CVE-2026-4698 High 8.8 JIT miscompilation in the JavaScript Engine: JIT component 0.8%
• CVE-2026-4697 High 7.5 Incorrect boundary conditions in the Audio/Video: Web Codecs component 0.7%
• CVE-2026-4696 Critical 9.8 Use-after-free in the Layout: Text and Fonts component 1.0%
• CVE-2026-4695 High 7.5 Incorrect boundary conditions in the Audio/Video: Web Codecs component 0.7%
• CVE-2026-4694 High 7.5 Incorrect boundary conditions, integer overflow in the Graphics component 0.8%
• CVE-2026-4693 High 7.5 Incorrect boundary conditions in the Audio/Video: Playback component 0.7%
• CVE-2026-4692 Critical 9.6 Sandbox escape in the Responsive Design Mode component 0.5%
• CVE-2026-4691 Critical 9.8 Use-after-free in the CSS Parsing and Computation component 0.5%
• CVE-2026-4690 Critical 9.6 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component 0.8%
• CVE-2026-4689 Critical 10.0 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component 0.7%
• CVE-2026-4688 Critical 9.6 Sandbox escape due to use-after-free in the Disability Access APIs component 0.6%
• CVE-2026-4687 Critical 9.6 Sandbox escape due to incorrect boundary conditions in the Telemetry component 0.6%