Mozilla Thunderbird vulnerabilities
2,511 known vulnerabilities affecting mozilla/thunderbird.
Total CVEs
2,511
CISA KEV
14
actively exploited
Public exploits
63
Exploited in wild
25
Severity breakdown
CRITICAL739HIGH767MEDIUM747LOW29UNKNOWN229
Vulnerabilities
Page 111 of 126
CVE-2026-117926P4UNKNOWNfixed in Thunderbird 153.6
CVE-2026-117926 Mozilla Foundation Security Advisory 2026-122: CVE-2026-117926
Mozilla Foundation Security Advisory 2026-122
CVE: CVE-2026-117926
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 153.6
mozilla
CVE-2026-117993P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117993 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117993
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117993
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117975P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117975 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117975
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117975
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-118002P4UNKNOWNfixed in Thunderbird 159
CVE-2026-118002 Mozilla Foundation Security Advisory 2026-121: CVE-2026-118002
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-118002
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117982P4UNKNOWNfixed in Thunderbird 153.6
CVE-2026-117982 Mozilla Foundation Security Advisory 2026-122: CVE-2026-117982
Mozilla Foundation Security Advisory 2026-122
CVE: CVE-2026-117982
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 153.6
mozilla
CVE-2026-117960P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117960 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117960
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117960
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117990P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117990 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117990
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117990
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117988P4UNKNOWNfixed in Thunderbird 153.6
CVE-2026-117988 Mozilla Foundation Security Advisory 2026-122: CVE-2026-117988
Mozilla Foundation Security Advisory 2026-122
CVE: CVE-2026-117988
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 153.6
mozilla
CVE-2026-118003P4UNKNOWNfixed in Thunderbird 159
CVE-2026-118003 Mozilla Foundation Security Advisory 2026-121: CVE-2026-118003
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-118003
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117995P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117995 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117995
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117995
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117956P4UNKNOWNfixed in Thunderbird 153.6
CVE-2026-117956 Mozilla Foundation Security Advisory 2026-122: CVE-2026-117956
Mozilla Foundation Security Advisory 2026-122
CVE: CVE-2026-117956
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 153.6
mozilla
CVE-2026-117871P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117871 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117871
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117871
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117969P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117969 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117969
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117969
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117910P4UNKNOWNfixed in Thunderbird 159
CVE-2026-117910 Mozilla Foundation Security Advisory 2026-121: CVE-2026-117910
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-117910
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-117999P4UNKNOWNfixed in Thunderbird 153.6
CVE-2026-117999 Mozilla Foundation Security Advisory 2026-122: CVE-2026-117999
Mozilla Foundation Security Advisory 2026-122
CVE: CVE-2026-117999
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 153.6
mozilla
CVE-2026-118011P4UNKNOWNfixed in Thunderbird 159
CVE-2026-118011 Mozilla Foundation Security Advisory 2026-121: CVE-2026-118011
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-118011
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-118023P4UNKNOWNfixed in Thunderbird 159
CVE-2026-118023 Mozilla Foundation Security Advisory 2026-121: CVE-2026-118023
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-118023
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2026-118024P4UNKNOWNfixed in Thunderbird 159
CVE-2026-118024 Mozilla Foundation Security Advisory 2026-121: CVE-2026-118024
Mozilla Foundation Security Advisory 2026-121
CVE: CVE-2026-118024
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 159
mozilla
CVE-2005-0255P4MEDIUMCVSS 5.0v0.1v0.2+8 more2005-05-02
CVE-2005-0255 [MEDIUM] CVE-2005-0255: String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the n
String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execute arbitrary code by forcing an out-of-memory state that causes
nvd
CVE-2019-11715P4MEDIUMCVSS 6.1fixed in 60.8.0≥ unspecified, < 60.82019-07-23
CVE-2019-11715 [MEDIUM] CWE-79 CVE-2019-11715: Due to an error while parsing page content, it is possible for properly sanitized user input to be m
Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on web sites in certain circumstances. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
nvdosv