Skip to content

Known vulnerabilities in Mozilla Thunderbird

Is your version affected?

CVE Summary Score Published
CVE-2026-92071 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component 9.6 Critical Sep 15, 2026
CVE-2026-92070 Information disclosure in the Networking component 4.3 Medium Sep 15, 2026
CVE-2026-92069 Spoofing issue in the DOM: Navigation component 5.4 Medium Sep 15, 2026
CVE-2026-92068 Site isolation issue in the Reader Mode component 5.4 Medium Sep 15, 2026
CVE-2026-92067 Use-after-free in the Widget: Gtk component 8.8 High Sep 15, 2026
CVE-2026-92066 Sandbox escape in the Profile Backup component 9.8 Critical Sep 15, 2026
CVE-2026-92065 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component 8.8 High Sep 15, 2026
CVE-2026-92064 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component 8.8 High Sep 15, 2026
CVE-2026-92063 Denial-of-service in the Audio/Video component 6.5 Medium Sep 15, 2026
CVE-2026-92062 Privilege escalation in the Session Restore component 8.8 High Sep 15, 2026
CVE-2026-92061 Incorrect boundary conditions in the Security: Process Sandboxing component 9.8 Critical Sep 15, 2026
CVE-2026-92060 Use-after-free in the Internationalization component 8.8 High Sep 15, 2026
CVE-2026-92059 Incorrect boundary conditions in the DOM: Editor component 9.3 Critical Sep 15, 2026
CVE-2026-92058 Use-after-free in the Graphics component 8.8 High Sep 15, 2026
CVE-2026-92057 Mitigation bypass in the Enterprise Policies component 9.1 Critical Sep 15, 2026
CVE-2026-92056 Use-after-free in the Graphics: Text component 8.8 High Sep 15, 2026
CVE-2026-92055 Privilege escalation in the DevTools component 8.8 High Sep 15, 2026
CVE-2026-92054 Privilege escalation in the Memory component 8.8 High Sep 15, 2026
CVE-2026-92053 Privilege escalation in the Graphics: CanvasWebGL component 8.8 High Sep 15, 2026
CVE-2026-92052 Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component 8.8 High Sep 15, 2026
CVE-2026-92051 Spoofing issue due to invalid pointer in the Graphics component 9.1 Critical Sep 15, 2026
CVE-2026-92050 Sandbox escape due to race condition in the XPConnect component 9.1 Critical Sep 15, 2026
CVE-2026-92049 Use-after-free in the Widget: Win32 component 8.8 High Sep 15, 2026
CVE-2026-92048 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component 9.0 Critical Sep 15, 2026
CVE-2026-92047 Privilege escalation in the Crash Reporting component 8.8 High Sep 15, 2026

Other Mozilla products