| CVE-2026-12298 |
Memory safety bug fixed in Thunderbird 152
|
5.4
Medium
|
Jun 16, 2026 |
| CVE-2026-12297 |
Sandbox escape due to incorrect boundary conditions in the Networking component
|
9.6
Critical
|
Jun 16, 2026 |
| CVE-2026-12296 |
Sandbox escape in the Security: Process Sandboxing component
|
9.6
Critical
|
Jun 16, 2026 |
| CVE-2026-12295 |
Sandbox escape in the DOM: Navigation component
|
9.6
Critical
|
Jun 16, 2026 |
| CVE-2026-12294 |
Sandbox escape in the DOM: Workers component
|
9.6
Critical
|
Jun 16, 2026 |
| CVE-2026-12293 |
Use-after-free in the Graphics: WebGPU component
|
9.8
Critical
|
Jun 16, 2026 |
| CVE-2026-12292 |
Incorrect boundary conditions in the Web Audio component
|
8.1
High
|
Jun 16, 2026 |
| CVE-2026-12291 |
Use-after-free in the Networking: HTTP component
|
8.8
High
|
Jun 16, 2026 |
| CVE-2026-12290 |
Memory safety bug fixed in Thunderbird 152
|
8.1
High
|
Jun 16, 2026 |
| CVE-2026-12289 |
Privilege escalation in the Graphics: WebRender component
|
8.8
High
|
Jun 16, 2026 |
| CVE-2026-8975 |
Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150
|
8.8
High
|
May 19, 2026 |
| CVE-2026-8974 |
Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150
|
8.8
High
|
May 19, 2026 |
| CVE-2026-8973 |
Memory safety bugs present in Thunderbird 150
|
8.8
High
|
May 19, 2026 |
| CVE-2026-8972 |
Privilege escalation in the WebRTC: Audio/Video component
|
8.8
High
|
May 19, 2026 |
| CVE-2026-8971 |
Same-origin policy bypass in the Networking: JAR component
|
6.5
Medium
|
May 19, 2026 |
| CVE-2026-8970 |
Privilege escalation in the Security component
|
8.8
High
|
May 19, 2026 |
| CVE-2026-8969 |
Mitigation bypass in the DOM: Security component
|
8.1
High
|
May 19, 2026 |
| CVE-2026-8968 |
Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8967 |
Information disclosure in the Graphics: WebGPU component
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8966 |
Information disclosure in the IP Protection component
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8965 |
Information disclosure in the DOM: Security component
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8964 |
Spoofing issue in the Popup Blocker component
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8963 |
Spoofing issue in the Web Speech component
|
7.5
High
|
May 19, 2026 |
| CVE-2026-8962 |
Mitigation bypass in the DOM: Security component
|
8.1
High
|
May 19, 2026 |
| CVE-2026-8961 |
Spoofing issue in the Form Autofill component
|
6.5
Medium
|
May 19, 2026 |