Skip to content

Known vulnerabilities in Mozilla Thunderbird

Is your version affected?

CVE Summary Score Published
CVE-2026-109737 Mitigation bypass in the Enterprise Policies component 8.1 High Oct 13, 2026
CVE-2026-109738 Use-after-free in the Audio/Video: Playback component 5.4 Medium Oct 13, 2026
CVE-2026-109739 Privilege escalation in the WebExtensions component 8.8 High Oct 13, 2026
CVE-2026-109731 Incorrect boundary conditions in the Graphics: Canvas2D component 5.4 Medium Oct 13, 2026
CVE-2026-109723 Integer overflow in the Layout: Text and Fonts component 5.4 Medium Oct 13, 2026
CVE-2026-109724 Use-after-free in the DOM: Core & HTML component 5.4 Medium Oct 13, 2026
CVE-2026-109734 Mitigation bypass in the DOM: Security component 8.1 High Oct 13, 2026
CVE-2026-109735 Use-after-free in the DOM: Animation component 5.4 Medium Oct 13, 2026
CVE-2026-109721 Incorrect boundary conditions in the JavaScript Engine: JIT component 5.4 Medium Oct 13, 2026
CVE-2026-109714 Incorrect boundary conditions in the Layout component 5.4 Medium Oct 13, 2026
CVE-2026-109717 Use-after-free in the DOM: Bindings (WebIDL) component 5.4 Medium Oct 13, 2026
CVE-2026-109720 JIT miscompilation in the JavaScript: WebAssembly component 7.1 High Oct 13, 2026
CVE-2026-109707 Sandbox escape due to use-after-free in the Networking component 9.6 Critical Oct 13, 2026
CVE-2026-109708 Sandbox escape due to incorrect boundary conditions in the Networking component 9.6 Critical Oct 13, 2026
CVE-2026-109709 Information disclosure, privilege escalation in the Security: Process Sandboxing component 8.8 High Oct 13, 2026
CVE-2026-109711 Use-after-free in the Graphics: Canvas2D component 5.4 Medium Oct 13, 2026
CVE-2026-109713 Use-after-free in the Crash Reporting component 5.4 Medium Oct 13, 2026
CVE-2026-109704 Privilege escalation in the Application Update component 8.8 High Oct 13, 2026
CVE-2026-109705 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component 9.6 Critical Oct 13, 2026
CVE-2026-109733 JIT miscompilation in the JavaScript Engine: JIT component 8.1 High Oct 13, 2026
CVE-2026-109753 Incorrect boundary conditions in the Layout component 8.1 High Oct 13, 2026
CVE-2026-109732 Use-after-free in the DOM: Streams component 5.4 Medium Oct 13, 2026
CVE-2026-109727 Use-after-free in the Audio/Video component 5.4 Medium Oct 13, 2026
CVE-2026-109728 Use-after-free in the DOM: Animation component 5.4 Medium Oct 13, 2026
CVE-2026-109729 Use-after-free in the JavaScript Engine: JIT component 5.4 Medium Oct 13, 2026

Other Mozilla products