Mozilla Thunderbird vulnerabilities
2,339 known vulnerabilities affecting mozilla/thunderbird.
Total CVEs
2,339
CISA KEV
14
actively exploited
Public exploits
63
Exploited in wild
25
Severity breakdown
CRITICAL739HIGH765MEDIUM746LOW29UNKNOWN60
Vulnerabilities
Page 7 of 117
CVE-2026-74936P3CRITICALCVSS 9.8fixed in 140.14.0≥ 141.0, < 153.1.02026-08-18
CVE-2026-74936 [CRITICAL] CWE-416 CVE-2026-74936: Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
nvdmozilla
CVE-2026-74944P3CRITICALCVSS 9.8fixed in 140.14.0≥ 141.0, < 153.1.02026-08-18
CVE-2026-74944 [CRITICAL] CWE-416 CVE-2026-74944: Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firef
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
nvdmozilla
CVE-2026-16377P3CRITICALCVSS 9.8fixed in 140.13.0≥ 141.0, < 153.02026-07-21
CVE-2026-16377 [CRITICAL] CWE-693 CVE-2026-16377: Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox
Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
nvdmozilla
CVE-2026-92061P3CRITICALCVSS 9.8fixed in 156.02026-09-15
CVE-2026-92061 [CRITICAL] CWE-119 CVE-2026-92061: Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was
Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
nvdmozilla
CVE-2026-2789P3CRITICALCVSS 9.8fixed in 140.8.0fixed in 148.02026-02-24
CVE-2026-2789 [CRITICAL] CWE-416 CVE-2026-2789: Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Fir
Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
nvdosv
CVE-2026-2786P3CRITICALCVSS 9.8fixed in 140.8.0fixed in 148.02026-02-24
CVE-2026-2786 [CRITICAL] CWE-416 CVE-2026-2786: Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Fire
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
nvdosv
CVE-2026-4701P3CRITICALCVSS 9.8≥ 0, < 1:140.9.0esr-1~deb11u1≥ 0, < 1:140.9.0esr-1~deb12u1+2 more2026-03-24
CVE-2026-4701 [CRITICAL] CVE-2026-4701: Use-after-free in the JavaScript Engine component
Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 149, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.
osv
CVE-2026-4717P3CRITICALCVSS 9.8≥ 0, < 1:140.9.0esr-1~deb11u1≥ 0, < 1:140.9.0esr-1~deb12u1+2 more2026-03-24
CVE-2026-4717 [CRITICAL] CVE-2026-4717: Privilege escalation in the Netmonitor component
Privilege escalation in the Netmonitor component. This vulnerability affects Firefox < 149, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.
osv
CVE-2026-2780P3CRITICALCVSS 9.8fixed in 140.8.0fixed in 148.02026-02-24
CVE-2026-2780 [CRITICAL] CWE-269 CVE-2026-2780: Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firef
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
nvdosv
CVE-2026-2782P3CRITICALCVSS 9.8fixed in 140.8.0fixed in 148.02026-02-24
CVE-2026-2782 [CRITICAL] CWE-269 CVE-2026-2782: Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firef
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
nvdosv
CVE-2026-16349P3CRITICALCVSS 9.8fixed in 140.13.0≥ 141.0, < 153.02026-07-21
CVE-2026-16349 [CRITICAL] CWE-346 CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox
Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
nvdmozilla
CVE-2026-84129P3CRITICALCVSS 9.8fixed in 153.2.0≥ 154.0, < 155.02026-09-01
CVE-2026-84129 [CRITICAL] CWE-346 CVE-2026-84129: Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155,
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
nvdmozilla
CVE-2026-84133P3CRITICALCVSS 9.8fixed in 153.2.0≥ 154.0, < 155.02026-09-01
CVE-2026-84133 [CRITICAL] CWE-346 CVE-2026-84133: Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firef
Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
nvdmozilla
CVE-2026-84140P3CRITICALCVSS 9.8fixed in 153.2.0≥ 154.0, < 155.02026-09-01
CVE-2026-84140 [CRITICAL] CWE-346 CVE-2026-84140: Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155,
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
nvdmozilla
CVE-2013-6671P3CRITICALCVSS 9.8fixed in 24.22013-12-11
CVE-2013-6671 [CRITICAL] CWE-94 CVE-2013-6671: The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24
The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements.
nvd
CVE-2026-92240P3CRITICALCVSS 9.1fixed in 140.16.0≥ 141.0, < 153.3.0+1 more2026-09-15
CVE-2026-92240 [CRITICAL] CWE-125 CVE-2026-92240: A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser
A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
nvdmozilla
CVE-2026-16390P3CRITICALCVSS 9.1fixed in 140.13.0≥ 141.0, < 153.02026-07-21
CVE-2026-16390 [CRITICAL] CWE-693 CVE-2026-16390: Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153,
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
nvdmozilla
CVE-2026-92038P3CRITICALCVSS 9.1fixed in 153.3.0≥ 154.0, < 156.02026-09-15
CVE-2026-92038 [CRITICAL] CWE-693 CVE-2026-92038: Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 1
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
nvdmozilla
CVE-2021-30547P3HIGHCVSS 8.8≥ 0, < 1:78.12.0-12021-06-15
CVE-2021-30547 [HIGH] CVE-2021-30547: Out of bounds write in ANGLE in Google Chrome prior to 91
Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
osv
CVE-2026-4696P3CRITICALCVSS 9.8≥ 0, < 1:140.9.0esr-1~deb11u1≥ 0, < 1:140.9.0esr-1~deb12u1+2 more2026-03-24
CVE-2026-4696 [CRITICAL] CVE-2026-4696: Use-after-free in the Layout: Text and Fonts component
Use-after-free in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.
osv