Mozilla Thunderbird vulnerabilities
2,511 known vulnerabilities affecting mozilla/thunderbird.
Total CVEs
2,511
CISA KEV
14
actively exploited
Public exploits
63
Exploited in wild
25
Severity breakdown
CRITICAL739HIGH767MEDIUM747LOW29UNKNOWN229
Vulnerabilities
Page 108 of 126
CVE-2011-3664P4MEDIUMCVSS 6.8≤ 8.0v0.1+98 more2011-12-21
CVE-2011-3664 [MEDIUM] CVE-2011-3664: Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not prop
Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) or possibly have unspecified other impact via a crafted web site.
nvd
CVE-2026-117903P4UNKNOWNfixed in Thunderbird 153.6
CVE-2026-117903 Mozilla Foundation Security Advisory 2026-122: CVE-2026-117903
Mozilla Foundation Security Advisory 2026-122
CVE: CVE-2026-117903
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 153.6
mozilla
CVE-2026-117912P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117912 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117912
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117912
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117925P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117925 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117925
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117925
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117860P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117860 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117860
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117860
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117867P4UNKNOWNfixed in Thunderbird 153.6
CVE-2026-117867 Mozilla Foundation Security Advisory 2026-122: CVE-2026-117867
Mozilla Foundation Security Advisory 2026-122
CVE: CVE-2026-117867
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 153.6
mozilla
CVE-2026-117914P4UNKNOWNfixed in Thunderbird 153.6
CVE-2026-117914 Mozilla Foundation Security Advisory 2026-122: CVE-2026-117914
Mozilla Foundation Security Advisory 2026-122
CVE: CVE-2026-117914
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 153.6
mozilla
CVE-2026-117884P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117884 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117884
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117884
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117944P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117944 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117944
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117944
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117934P4UNKNOWNfixed in Thunderbird 153.6
CVE-2026-117934 Mozilla Foundation Security Advisory 2026-122: CVE-2026-117934
Mozilla Foundation Security Advisory 2026-122
CVE: CVE-2026-117934
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 153.6
mozilla
CVE-2026-117927P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117927 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117927
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117927
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117907P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117907 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117907
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117907
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117905P4UNKNOWNfixed in Thunderbird 153.6
CVE-2026-117905 Mozilla Foundation Security Advisory 2026-122: CVE-2026-117905
Mozilla Foundation Security Advisory 2026-122
CVE: CVE-2026-117905
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 153.6
mozilla
CVE-2026-117874P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117874 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117874
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117874
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117897P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117897 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117897
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117897
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117876P4UNKNOWNfixed in Thunderbird 153.6
CVE-2026-117876 Mozilla Foundation Security Advisory 2026-122: CVE-2026-117876
Mozilla Foundation Security Advisory 2026-122
CVE: CVE-2026-117876
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 153.6
mozilla
CVE-2026-117869P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117869 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117869
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117869
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117908P4UNKNOWNfixed in Thunderbird 153.6
CVE-2026-117908 Mozilla Foundation Security Advisory 2026-122: CVE-2026-117908
Mozilla Foundation Security Advisory 2026-122
CVE: CVE-2026-117908
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 153.6
mozilla
CVE-2026-117900P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117900 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117900
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117900
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117919P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117919 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117919
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117919
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla