Mozilla Thunderbird vulnerabilities
2,339 known vulnerabilities affecting mozilla/thunderbird.
Total CVEs
2,339
CISA KEV
14
actively exploited
Public exploits
63
Exploited in wild
25
Severity breakdown
CRITICAL739HIGH765MEDIUM746LOW29UNKNOWN60
Vulnerabilities
Page 18 of 117
CVE-2026-2769P3HIGHCVSS 8.8fixed in 140.8.0fixed in 148.02026-02-24
CVE-2026-2769 [HIGH] CWE-416 CVE-2026-2769: Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Fir
Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
nvdosv
CVE-2013-0754P3CRITICALCVSS 9.3fixed in 17.0.22013-01-13
CVE-2013-0754 [CRITICAL] CWE-416 CVE-2013-0754: Use-after-free vulnerability in the ListenerManager implementation in Mozilla Firefox before 18.0, F
Use-after-free vulnerability in the ListenerManager implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via vectors involving the trigger
nvd
CVE-2010-2766P3CRITICALCVSS 9.3≤ 3.0.6v0.1+66 more2010-09-09
CVE-2010-2766 [CRITICAL] CWE-94 CVE-2010-2766: The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird
The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote attackers to execute arbitrary code via vectors involving access to a deleted object.
nvd
CVE-2026-74969P3HIGHCVSS 8.8fixed in 140.14.0≥ 141.0, < 153.1.02026-08-18
CVE-2026-74969 [HIGH] CWE-416 CVE-2026-74969: Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154,
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
nvdmozilla
CVE-2026-74949P3HIGHCVSS 8.8fixed in 140.14.0≥ 141.0, < 153.1.02026-08-18
CVE-2026-74949 [HIGH] CWE-416 CVE-2026-74949: Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability w
Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
nvdmozilla
CVE-2026-74942P3HIGHCVSS 8.8fixed in 140.14.0≥ 141.0, < 153.1.02026-08-18
CVE-2026-74942 [HIGH] CWE-269 CVE-2026-74942: Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefo
Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
nvdmozilla
CVE-2026-84128P3HIGHCVSS 8.8fixed in 155.02026-09-01
CVE-2026-84128 [HIGH] CWE-284 CVE-2026-84128: Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 an
Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
nvdmozilla
CVE-2026-84123P3HIGHCVSS 8.8fixed in 153.2.0≥ 154.0, < 155.02026-09-01
CVE-2026-84123 [HIGH] CWE-416 CVE-2026-84123: Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was
Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
nvdmozilla
CVE-2026-74937P3HIGHCVSS 8.8fixed in 153.1.0fixed in 154.02026-08-18
CVE-2026-74937 [HIGH] CWE-416 CVE-2026-74937: Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
nvdmozilla
CVE-2026-74950P3HIGHCVSS 8.8fixed in 153.1.0fixed in 154.02026-08-18
CVE-2026-74950 [HIGH] CWE-269 CVE-2026-74950: Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Fi
Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
nvdmozilla
CVE-2010-0176P3CRITICALCVSS 9.3≤ 3.0.3v0.1+59 more2010-04-05
CVE-2010-0176 [CRITICAL] CWE-399 CVE-2010-0176: Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4;
Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a
nvd
CVE-2026-16366P3HIGHCVSS 8.8fixed in 153.02026-07-21
CVE-2026-16366 [HIGH] CWE-269 CVE-2026-16366: Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 a
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
nvdmozilla
CVE-2025-8035P3HIGHCVSS 8.8fixed in 128.13.0fixed in 141.0+1 more2025-07-22
CVE-2025-8035 [HIGH] CWE-119 CVE-2025-8035: Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunder
Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 141, Fir
nvdosv
CVE-2026-12289P3HIGHCVSS 8.8fixed in 152.0.0≥ 140.0, < 140.12.02026-06-16
CVE-2026-12289 [HIGH] CWE-269 CVE-2026-12289: Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 1
Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
nvdmozilla
CVE-2026-8957P3HIGHCVSS 8.8fixed in 140.11fixed in 151.0.02026-05-19
CVE-2026-8957 [HIGH] CWE-269 CVE-2026-8957: Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 1
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
nvdmozilla
CVE-2016-9900P3HIGHCVSS 7.5fixed in 45.6.0≥ unspecified, < 45.62018-06-11
CVE-2016-9900 [HIGH] CWE-254 CVE-2016-9900: External resources that should be blocked when loaded by SVG images can bypass security restrictions
External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allow for cross-domain data leakage. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6.
nvd
CVE-2026-109709P3HIGHCVSS 8.8fixed in Thunderbird 158
CVE-2026-109709 [HIGH] Mozilla Foundation Security Advisory 2026-109: CVE-2026-109709
Mozilla Foundation Security Advisory 2026-109
CVE: CVE-2026-109709
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 158
mozilla
CVE-2026-92024P3HIGHCVSS 8.8fixed in 140.16.0≥ 141.0, < 153.3.0+1 more2026-09-15
CVE-2026-92024 [HIGH] CWE-416 CVE-2026-92024: Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
nvdmozilla
CVE-2026-92029P3HIGHCVSS 8.8fixed in 140.16.0≥ 141.0, < 153.3.0+1 more2026-09-15
CVE-2026-92029 [HIGH] CWE-416 CVE-2026-92029: Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
nvdmozilla
CVE-2026-92025P3HIGHCVSS 8.8fixed in 140.16.0≥ 141.0, < 153.3.0+1 more2026-09-15
CVE-2026-92025 [HIGH] CWE-416 CVE-2026-92025: Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefo
Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
nvdmozilla