Mozilla Thunderbird

• CVE-2026-4686 High 7.5 Incorrect boundary conditions in the Graphics: Canvas2D component 0.7%
• CVE-2026-4685 High 7.5 Incorrect boundary conditions in the Graphics: Canvas2D component 0.7%
• CVE-2026-4684 High 7.5 Race condition, use-after-free in the Graphics: WebRender component 0.4%
• CVE-2026-2807 Critical 9.8 Memory safety bugs fixed in Firefox 148 and Thunderbird 148 0.3%
• CVE-2026-2806 Critical 9.1 Uninitialized memory in the Graphics: Text component 0.4%
• CVE-2026-2805 Critical 9.8 Invalid pointer in the DOM: Core & HTML component 0.7%
• CVE-2026-2804 Medium 5.4 Use-after-free in the JavaScript: WebAssembly component 0.5%
• CVE-2026-2803 High 7.5 Information disclosure, mitigation bypass in the Settings UI component 0.3%
• CVE-2026-2802 Medium 4.2 Race condition in the JavaScript: GC component 0.2%
• CVE-2026-2801 High 7.5 Incorrect boundary conditions in the JavaScript: WebAssembly component 0.3%
• CVE-2026-2800 Critical 9.8 Spoofing issue in the WebAuthn component in Firefox for Android 0.3%
• CVE-2026-2799 High 8.8 Use-after-free in the DOM: Core & HTML component 0.5%
• CVE-2026-2798 High 8.8 Use-after-free in the DOM: Core & HTML component 0.3%
• CVE-2026-2797 High 8.8 Use-after-free in the JavaScript: GC component 0.5%
• CVE-2026-2796 Critical 9.8 JIT miscompilation in the JavaScript: WebAssembly component 0.9%
• CVE-2026-2795 High 8.8 Use-after-free in the JavaScript: GC component 0.3%
• CVE-2026-2793 Critical 9.8 Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 0.4%
• CVE-2026-2792 Critical 9.8 Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 0.4%
• CVE-2026-2791 Critical 9.8 Mitigation bypass in the Networking: Cache component 0.6%
• CVE-2026-2790 High 8.8 Same-origin policy bypass in the Networking: JAR component 0.3%
• CVE-2026-2789 High 8.8 Use-after-free in the Graphics: ImageLib component 0.5%
• CVE-2026-2788 Critical 9.8 Incorrect boundary conditions in the Audio/Video: GMP component 0.7%
• CVE-2026-2787 High 8.8 Use-after-free in the DOM: Window and Location component 0.6%
• CVE-2026-2786 High 8.8 Use-after-free in the JavaScript Engine component 0.5%
• CVE-2026-2785 High 8.8 Invalid pointer in the JavaScript Engine component 0.6%
• CVE-2026-2784 Critical 9.8 Mitigation bypass in the DOM: Security component 0.5%
• CVE-2026-2783 Medium 6.5 Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component 0.3%
• CVE-2026-2782 High 8.8 Privilege escalation in the Netmonitor component 0.3%
• CVE-2026-2781 High 8.8 Integer overflow in the Libraries component in NSS 0.4%
• CVE-2026-2780 High 8.8 Privilege escalation in the Netmonitor component 0.4%
• CVE-2026-2779 Critical 9.8 Incorrect boundary conditions in the Networking: JAR component 0.7%
• CVE-2026-2778 Critical 10.0 Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component 0.6%
• CVE-2026-2777 Critical 9.8 Privilege escalation in the Messaging System component 0.4%
• CVE-2026-2776 Critical 10.0 Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software 0.6%
• CVE-2026-2775 Critical 9.8 Mitigation bypass in the DOM: HTML Parser component 0.8%
• CVE-2026-2774 High 8.8 Integer overflow in the Audio/Video component 0.9%
• CVE-2026-2773 Critical 9.8 Incorrect boundary conditions in the Web Audio component 0.9%
• CVE-2026-2772 High 8.8 Use-after-free in the Audio/Video: Playback component 0.7%
• CVE-2026-2771 Critical 9.8 Undefined behavior in the DOM: Core & HTML component 0.8%
• CVE-2026-2770 High 8.8 Use-after-free in the DOM: Bindings (WebIDL) component 0.7%
• CVE-2026-2769 High 8.8 Use-after-free in the Storage: IndexedDB component 0.7%
• CVE-2026-2768 Critical 10.0 Sandbox escape in the Storage: IndexedDB component 0.4%
• CVE-2026-2767 High 8.8 Use-after-free in the JavaScript: WebAssembly component 0.5%
• CVE-2026-2766 Critical 9.8 Use-after-free in the JavaScript Engine: JIT component 0.7%
• CVE-2026-2765 Critical 9.8 Use-after-free in the JavaScript Engine component 0.7%
• CVE-2026-2764 Critical 9.8 JIT miscompilation, use-after-free in the JavaScript Engine: JIT component 0.7%
• CVE-2026-2763 Critical 9.8 Use-after-free in the JavaScript Engine component 0.7%
• CVE-2026-2762 Critical 9.8 Integer overflow in the JavaScript: Standard Library component 0.6%
• CVE-2026-2761 Critical 10.0 Sandbox escape in the Graphics: WebRender component 0.5%
• CVE-2026-2760 Critical 10.0 Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component 0.5%