Skip to content

Known vulnerabilities in Mozilla Thunderbird

Is your version affected?

CVE Summary Score Published
CVE-2026-100817 Other issue in the JavaScript: WebAssembly component 5.4 Medium Sep 29, 2026
CVE-2026-100818 Sandbox escape due to use-after-free in the Widget: Gtk component 9.6 Critical Sep 29, 2026
CVE-2026-100816 Site isolation issue in the DOM: Networking component 8.1 High Sep 29, 2026
CVE-2026-100814 Incorrect boundary conditions in the JavaScript Engine: JIT component 8.8 High Sep 29, 2026
CVE-2026-100815 Use-after-free in the CSS Parsing and Computation component 8.8 High Sep 29, 2026
CVE-2026-100812 Denial-of-service in the Graphics component 6.5 Medium Sep 29, 2026
CVE-2026-100813 Invalid pointer in the JavaScript Engine: JIT component 8.8 High Sep 29, 2026
CVE-2026-100810 Other issue in the DevTools component 9.8 Critical Sep 29, 2026
CVE-2026-100811 Sandbox escape due to use-after-free in the DOM: Core & HTML component 9.6 Critical Sep 29, 2026
CVE-2026-100809 Same-origin policy bypass in the DevTools component 8.1 High Sep 29, 2026
CVE-2026-100808 Mitigation bypass in the DOM: Service Workers component 8.8 High Sep 29, 2026
CVE-2026-100807 Privilege escalation in the DOM: Service Workers component 8.8 High Sep 29, 2026
CVE-2026-100805 Race condition, use-after-free in the Audio/Video component 7.5 High Sep 29, 2026
CVE-2026-100806 Uninitialized memory in the Graphics: WebGPU component 4.3 Medium Sep 29, 2026
CVE-2026-100803 Same-origin policy bypass in the WebExtensions component 8.1 High Sep 29, 2026
CVE-2026-100804 Sandbox escape due to use-after-free in the Preferences: Backend component 9.6 Critical Sep 29, 2026
CVE-2026-100801 Privilege escalation in the DLL Services component 8.8 High Sep 29, 2026
CVE-2026-100802 Uninitialized memory in the Graphics: WebGPU component 4.3 Medium Sep 29, 2026
CVE-2026-100800 Sandbox escape due to use-after-free in the Disability Access APIs component 9.6 Critical Sep 29, 2026
CVE-2026-100798 Cryptography misuse in Storage: Quota Manager component 8.1 High Sep 29, 2026
CVE-2026-100799 Uninitialized memory in the Graphics: WebGPU component 4.3 Medium Sep 29, 2026
CVE-2026-100796 Use-after-free in the JavaScript: WebAssembly component 8.8 High Sep 29, 2026
CVE-2026-100797 Privilege escalation due to use-after-free in the Graphics: WebRender component 8.8 High Sep 29, 2026
CVE-2026-100795 Denial-of-service in the Networking component 6.5 Medium Sep 29, 2026
CVE-2026-96869 Information disclosure in the Networking component 4.3 Medium Sep 29, 2026

Other Mozilla products