Mozilla Thunderbird

• CVE-2026-2759 Critical 9.8 Incorrect boundary conditions in the Graphics: ImageLib component 0.5%
• CVE-2026-2758 Critical 9.8 Use-after-free in the JavaScript: GC component 0.6%
• CVE-2026-2757 Critical 9.8 Incorrect boundary conditions in the WebRTC: Audio/Video component 0.6%
• CVE-2026-2447 High 8.8 Heap buffer overflow in libvpx 0.7%
• CVE-2026-0818 Medium 4.3 CSS-based exfiltration of the content from partially encrypted emails when allowing remote content 0.2%
• CVE-2026-0892 Critical 9.8 Memory safety bugs fixed in Firefox 147 and Thunderbird 147 0.5%
• CVE-2026-0891 High 8.1 Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 0.5%
• CVE-2026-0890 Medium 5.4 Spoofing issue in the DOM: Copy & Paste and Drag & Drop component 0.3%
• CVE-2026-0889 High 7.5 Denial-of-service in the DOM: Service Workers component 0.5%
• CVE-2026-0888 Medium 5.3 Information disclosure in the XML component 0.3%
• CVE-2026-0887 Medium 4.3 Clickjacking issue, information disclosure in the PDF Viewer component 0.3%
• CVE-2026-0886 Medium 5.3 Incorrect boundary conditions in the Graphics component 0.4%
• CVE-2026-0885 Medium 6.5 Use-after-free in the JavaScript: GC component 0.4%
• CVE-2026-0884 Critical 9.8 Use-after-free in the JavaScript Engine component 0.5%
• CVE-2026-0883 Medium 5.3 Information disclosure in the Networking component 0.4%
• CVE-2026-0882 High 8.8 Use-after-free in the IPC component 0.5%
• CVE-2026-0881 Critical 10.0 Sandbox escape in the Messaging System component 0.3%
• CVE-2026-0880 High 8.8 Sandbox escape due to integer overflow in the Graphics component 0.5%
• CVE-2026-0879 Critical 9.8 Sandbox escape due to incorrect boundary conditions in the Graphics component 0.5%
• CVE-2026-0878 High 8.0 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.5%
• CVE-2026-0877 High 8.1 Mitigation bypass in the DOM: Security component 0.5%
• CVE-2025-14333 High 8.1 Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 0.4%
• CVE-2025-14332 High 7.3 Memory safety bugs fixed in Firefox 146 and Thunderbird 146 0.3%
• CVE-2025-14331 Medium 6.5 Same-origin policy bypass in the Request Handling component 0.2%
• CVE-2025-14330 Critical 9.8 JIT miscompilation in the JavaScript Engine: JIT component 0.5%
• CVE-2025-14329 High 8.8 Privilege escalation in the Netmonitor component 0.4%
• CVE-2025-14328 High 8.8 Privilege escalation in the Netmonitor component 0.4%
• CVE-2025-14327 High 7.5 Spoofing issue in the Downloads Panel component 0.4%
• CVE-2025-14326 Critical 9.8 Use-after-free in the Audio/Video: GMP component 0.5%
• CVE-2025-14325 High 7.3 JIT miscompilation in the JavaScript Engine: JIT component 0.3%
• CVE-2025-14324 Critical 9.8 JIT miscompilation in the JavaScript Engine: JIT component 0.6%
• CVE-2025-14323 High 8.8 Privilege escalation in the DOM: Notifications component 0.4%
• CVE-2025-14322 High 8.0 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2025-14321 Critical 9.8 Use-after-free in the WebRTC: Signaling component 0.6%
• CVE-2025-13027 High 8.1 Memory safety bugs fixed in Firefox 145 and Thunderbird 145 0.4%
• CVE-2025-13020 High 8.8 Use-after-free in the WebRTC: Audio/Video component 0.3%
• CVE-2025-13019 High 8.1 Same-origin policy bypass in the DOM: Workers component 0.3%
• CVE-2025-13018 High 8.1 Mitigation bypass in the DOM: Security component 0.3%
• CVE-2025-13017 High 8.1 Same-origin policy bypass in the DOM: Notifications component 0.3%
• CVE-2025-13026 Critical 9.8 Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component 0.4%
• CVE-2025-13025 High 7.5 Incorrect boundary conditions in the Graphics: WebGPU component 0.3%
• CVE-2025-13024 Critical 9.8 JIT miscompilation in the JavaScript Engine: JIT component 0.4%
• CVE-2025-13016 High 7.5 Incorrect boundary conditions in the JavaScript: WebAssembly component 0.4%
• CVE-2025-13023 Critical 9.8 Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component 0.4%
• CVE-2025-13022 Critical 9.8 Incorrect boundary conditions in the Graphics: WebGPU component 0.4%
• CVE-2025-13021 Critical 9.8 Incorrect boundary conditions in the Graphics: WebGPU component 0.4%
• CVE-2025-13014 High 8.8 Use-after-free in the Audio/Video component 0.3%
• CVE-2025-13013 Medium 6.1 Mitigation bypass in the DOM: Core & HTML component 0.2%
• CVE-2025-13012 High 7.5 Race condition in the Graphics component 0.2%
• CVE-2025-11721 Critical 9.8 Memory safety bug fixed in Firefox 144 and Thunderbird 144 0.4%