Skip to content

Known vulnerabilities in Mozilla Thunderbird

Is your version affected?

CVE Summary Score Published
CVE-2026-16390 Mitigation bypass in the Enterprise Policies component 9.1 Critical Jul 21, 2026
CVE-2026-16391 Information disclosure in the Storage: IndexedDB component 7.5 High Jul 21, 2026
CVE-2026-16389 Incorrect boundary conditions, integer overflow in the Libraries component in NSS 9.8 Critical Jul 21, 2026
CVE-2026-16388 Sandbox escape in the DOM: Networking component 9.8 Critical Jul 21, 2026
CVE-2026-16387 Site isolation issue in the Networking component 9.8 Critical Jul 21, 2026
CVE-2026-16386 Information disclosure due to uninitialized memory in the Graphics: WebGPU component 7.5 High Jul 21, 2026
CVE-2026-16385 Information disclosure due to uninitialized memory in the Graphics: WebGPU component 7.5 High Jul 21, 2026
CVE-2026-16383 Mitigation bypass in the DOM: Networking component 9.8 Critical Jul 21, 2026
CVE-2026-16384 Information disclosure due to uninitialized memory in the Graphics: WebGPU component 7.5 High Jul 21, 2026
CVE-2026-16382 Mitigation bypass in the DOM: Service Workers component 9.8 Critical Jul 21, 2026
CVE-2026-16381 Same-origin policy bypass in the Networking: DNS component 9.1 Critical Jul 21, 2026
CVE-2026-16380 Mitigation bypass in the Networking component 9.1 Critical Jul 21, 2026
CVE-2026-16358 Site isolation issue in the Graphics: WebRender component 9.8 Critical Jul 21, 2026
CVE-2026-16379 Privilege escalation in the DOM: Content Processes component 8.8 High Jul 21, 2026
CVE-2026-16377 Mitigation bypass in the PDF Viewer component 9.8 Critical Jul 21, 2026
CVE-2026-16378 Other issue in the DOM: Copy & Paste and Drag & Drop component 7.5 High Jul 21, 2026
CVE-2026-16376 Denial-of-service in the Graphics: WebGPU component 7.5 High Jul 21, 2026
CVE-2026-16375 Site isolation issue in the Networking: HTTP component 9.8 Critical Jul 21, 2026
CVE-2026-16374 Information disclosure in the Framework component in DevTools 7.5 High Jul 21, 2026
CVE-2026-16371 Privilege escalation in the DOM: Navigation component 8.8 High Jul 21, 2026
CVE-2026-16372 Privilege escalation in the DOM: Content Processes component 8.8 High Jul 21, 2026
CVE-2026-16370 Mitigation bypass in the DOM: Networking component 9.1 Critical Jul 21, 2026
CVE-2026-16357 Incorrect boundary conditions in the Graphics component 9.8 Critical Jul 21, 2026
CVE-2026-16356 Sandbox escape due to use-after-free in the Disability Access APIs component 9.8 Critical Jul 21, 2026
CVE-2026-16355 JIT miscompilation in the JavaScript Engine: JIT component 9.8 Critical Jul 21, 2026

Other Mozilla products