Mozilla Thunderbird

• CVE-2026-92029 High 8.8 Use-after-free in the SVG component 0.3%
• CVE-2026-92028 High 8.8 Use-after-free in the DOM: Core & HTML component 0.3%
• CVE-2026-92027 High 8.8 Use-after-free in the DOM: Streams component 0.3%
• CVE-2026-92026 High 8.8 Use-after-free in the Networking component 0.3%
• CVE-2026-92025 High 8.8 Use-after-free in the DOM: Navigation component 0.3%
• CVE-2026-92024 High 8.8 Use-after-free in the SVG component 0.3%
• CVE-2026-92023 High 8.8 Use-after-free in the XML component 0.3%
• CVE-2026-92022 High 8.8 Use-after-free in the DOM: HTML Parser component 0.3%
• CVE-2026-92021 High 8.8 Use-after-free in the JavaScript Engine: JIT component 0.3%
• CVE-2026-92020 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component 0.3%
• CVE-2026-92019 High 8.1 Mitigation bypass in the Remote Settings Client component 0.3%
• CVE-2026-92018 Critical 9.6 Sandbox escape in the DOM: Core & HTML component 0.3%
• CVE-2026-92017 High 8.8 Privilege escalation in the DOM: Service Workers component 0.2%
• CVE-2026-92016 High 8.8 Use-after-free in the Disability Access APIs component 0.3%
• CVE-2026-92015 High 8.8 Privilege escalation in the WebExtensions component 0.3%
• CVE-2026-92014 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics component 0.2%
• CVE-2026-92013 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92012 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92011 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92010 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92009 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92008 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92007 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92006 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component 0.3%
• CVE-2026-92005 Medium 5.3 Use-after-free in the Audio/Video: Web Codecs component 0.4%
• CVE-2026-84642 High 7.5 Allowed UNC hostnames for attachments interpreted as a regular expression 0.4%
• CVE-2026-84641 High 7.5 Information disclosure due to malicious IMAP server response 0.3%
• CVE-2026-84640 High 7.5 One byte overflow read in mail parser 0.3%
• CVE-2026-84639 Critical 9.1 Uninitialized memory in MIME parsing 0.3%
• CVE-2026-84637 Critical 9.8 Calendar invitation attachments could launch local executables 0.6%
• CVE-2026-84144 High 7.5 Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2 0.4%
• CVE-2026-84143 Critical 9.8 Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15 0.4%
• CVE-2026-84142 Critical 9.8 Internally found bugs fixed in Thunderbird 155 0.6%
• CVE-2026-84141 Critical 9.8 Integer overflow in the Graphics: ImageLib component 0.3%
• CVE-2026-84140 Critical 9.8 Site isolation issue in the DOM: Navigation component 0.2%
• CVE-2026-84139 Critical 9.8 Clickjacking issue in the DOM: Events component 0.3%
• CVE-2026-84138 High 7.5 Denial-of-service in the PDF Viewer component 0.4%
• CVE-2026-84137 Critical 9.8 Spoofing issue in the DOM: Core & HTML component 0.1%
• CVE-2026-84136 Critical 9.8 Other issue in the DOM: Navigation component 0.2%
• CVE-2026-84134 Critical 9.8 Other issue in the Profile Backup component 0.6%
• CVE-2026-84133 Critical 9.8 Site isolation issue in the DOM: Push Subscriptions component 0.2%
• CVE-2026-84132 High 7.5 Information disclosure in the Networking: HTTP component 0.3%
• CVE-2026-84130 High 7.5 Information disclosure in the Graphics: WebGPU component 0.4%
• CVE-2026-84129 Critical 9.8 Site isolation issue in the DOM: Navigation component 0.2%
• CVE-2026-84128 High 8.8 Privilege escalation in the WebDriver BiDi component 0.4%
• CVE-2026-84126 Medium 4.3 Incorrect boundary conditions in the Layout: Grid component 0.3%
• CVE-2026-84125 Medium 5.4 Use-after-free in the DOM: Core & HTML component 0.3%
• CVE-2026-84124 Medium 5.4 Use-after-free in the DOM: Core & HTML component 0.2%
• CVE-2026-84123 High 8.8 Privilege escalation due to use-after-free in the Graphics: WebGPU component 0.4%
• CVE-2026-84122 Medium 5.4 Use-after-free in the Audio/Video component 0.2%