Mozilla Thunderbird

• CVE-2025-6426 High 8.8 No warning when opening executable terminal files on macOS 0.2%
• CVE-2025-6425 Medium 4.3 The WebCompat WebExtension shipped with Firefox exposed a persistent UUID 0.3%
• CVE-2025-6424 Critical 9.8 Use-after-free in FontFaceSet 8.0%
• CVE-2025-5986 Medium 6.5 Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links 0.6%
• CVE-2025-5272 High 7.3 Memory safety bugs fixed in Firefox 139 and Thunderbird 139 0.3%
• CVE-2025-5271 Medium 6.5 Devtools' preview ignored CSP headers 0.3%
• CVE-2025-5270 High 7.5 SNI was sometimes unencrypted 0.3%
• CVE-2025-5269 High 8.1 Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11 0.5%
• CVE-2025-5268 High 8.1 Memory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11 0.5%
• CVE-2025-5267 Medium 5.4 Clickjacking vulnerability could have led to leaking saved payment card details 0.3%
• CVE-2025-5266 Medium 4.3 Script element events leaked cross-origin resource status 0.3%
• CVE-2025-5265 Medium 4.8 Potential local code execution in “Copy as cURL” command 0.2%
• CVE-2025-5264 Medium 4.8 Potential local code execution in “Copy as cURL” command 0.3%
• CVE-2025-5263 Medium 4.3 Error handling for script execution was incorrectly isolated from web content 0.3%
• CVE-2025-5262 High 7.5 A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitab 0.5%
• CVE-2025-4919 High 8.8 Out-of-bounds access when optimizing linear sums 9.1%
• CVE-2025-4918 Critical 9.8 Out-of-bounds access when resolving Promise objects 9.5%
• CVE-2025-3932 Medium 6.5 Tracking Links in Attachments Bypassed Remote Content Blocking 0.4%
• CVE-2025-3909 High 8.1 JavaScript Execution via Spoofed PDF Attachment and file:/// Link 0.5%
• CVE-2025-3875 High 7.5 Sender Spoofing via Malformed From Header in Thunderbird 0.4%
• CVE-2025-4093 High 8.1 Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 0.5%
• CVE-2025-4092 Medium 6.5 Memory safety bugs fixed in Firefox 138 and Thunderbird 138 0.3%
• CVE-2025-4091 High 8.1 Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 0.5%
• CVE-2025-4090 Medium 5.3 Leaked library paths in Thunderbird for Android 0.3%
• CVE-2025-4089 Medium 5.1 Potential local code execution in "copy as cURL" command 0.2%
• CVE-2025-4088 Medium 6.5 Cross-site request forgery via storage access API redirects 0.2%
• CVE-2025-4087 Medium 4.8 Unsafe attribute access during XPath parsing 0.3%
• CVE-2025-4086 Medium 6.5 Specially crafted filename could be used to obscure download type 0.3%
• CVE-2025-4085 High 7.1 Potential information leakage and privilege escalation in UITour actor 0.3%
• CVE-2025-4084 Medium 5.7 Potential local code execution in "copy as cURL" command 0.4%
• CVE-2025-4083 Critical 9.1 Process isolation bypass using "javascript:" URI links in cross-origin frames 0.5%
• CVE-2025-4082 Medium 5.9 WebGL shader attribute memory corruption in Thunderbird for macOS 0.5%
• CVE-2025-2817 High 8.8 Privilege escalation in Thunderbird Updater 0.7%
• CVE-2025-3523 Medium 6.4 User Interface (UI) Misrepresentation of attachment URL 0.3%
• CVE-2025-2830 Medium 6.3 Information Disclosure of /tmp directory listing 0.4%
• CVE-2025-3522 Medium 6.3 Leak of hashed Window credentials via crafted attachment URL 0.3%
• CVE-2025-3034 High 8.1 Memory safety bugs fixed in Firefox 137 and Thunderbird 137 0.5%
• CVE-2025-3033 High 7.7 Opening local .url files could lead to another file being opened 0.2%
• CVE-2025-3032 High 7.4 Leaking file descriptors from the fork server 0.4%
• CVE-2025-3031 Medium 6.5 JIT optimization bug with different stack slot sizes 0.3%
• CVE-2025-3030 High 8.1 Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 0.5%
• CVE-2025-3029 High 7.3 URL Bar Spoofing via non-BMP Unicode characters 0.4%
• CVE-2025-3028 Medium 6.5 Use-after-free triggered by XSLTProcessor 0.9%
• CVE-2025-26695 Medium 5.3 Downloading of OpenPGP keys from WKD used incorrect padding 0.2%
• CVE-2025-26696 High 7.0 Crafted email message incorrectly shown as being encrypted 0.4%
• CVE-2025-1943 High 8.2 Memory safety bugs fixed in Firefox 136 and Thunderbird 136 0.4%
• CVE-2025-1938 Medium 6.5 Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 0.3%
• CVE-2025-1937 High 7.5 Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 0.6%
• CVE-2025-1936 High 7.3 Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents 0.4%
• CVE-2025-1935 Medium 4.3 Clickjacking the registerProtocolHandler info-bar 0.3%