Skip to content

Vulnerabilities of Mozilla Thunderbird

Is your version affected?

CVE Summary Score Published
CVE-2026-117979 Incorrect boundary conditions in the Graphics: WebRender component 8.8 High Oct 27, 2026
CVE-2026-117980 Use-after-free in the Graphics component 9.8 Critical Oct 27, 2026
CVE-2026-117981 Privilege escalation in the Toolkit component 9.8 Critical Oct 27, 2026
CVE-2026-117976 Site isolation issue in the DOM: Navigation component 8.1 High Oct 27, 2026
CVE-2026-117977 Other issue in the Console component 8.1 High Oct 27, 2026
CVE-2026-117978 Incorrect boundary conditions in the Graphics component 8.1 High Oct 27, 2026
CVE-2026-117973 Use-after-free in the Networking: DNS component 8.8 High Oct 27, 2026
CVE-2026-117974 Use-after-free in the XML component 8.8 High Oct 27, 2026
CVE-2026-117975 Sandbox escape due to invalid pointer in the Graphics: WebRender component 8.8 High Oct 27, 2026
CVE-2026-117971 Sandbox escape due to use-after-free in the Print Preview component 9.6 Critical Oct 27, 2026
CVE-2026-117972 Use-after-free in the Graphics component 8.8 High Oct 27, 2026
CVE-2026-117968 Use-after-free in the DOM: Core & HTML component 8.8 High Oct 27, 2026
CVE-2026-117969 Invalid pointer in the JavaScript Engine: JIT component 8.8 High Oct 27, 2026
CVE-2026-117970 Race condition in the Disability Access APIs component 8.8 High Oct 27, 2026
CVE-2026-117965 Same-origin policy bypass in the Address Bar component 8.1 High Oct 27, 2026
CVE-2026-117966 Site isolation issue in the Networking: HTTP component 8.1 High Oct 27, 2026
CVE-2026-117967 Mitigation bypass in the DOM: Security component 8.8 High Oct 27, 2026
CVE-2026-117963 Incorrect boundary conditions in the DOM: Service Workers component 8.1 High Oct 27, 2026
CVE-2026-117964 Use-after-free in the Panning and Zooming component 8.8 High Oct 27, 2026
CVE-2026-117962 Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component 9.6 Critical Oct 27, 2026
CVE-2026-117960 Spoofing issue in the DOM: Core & HTML component 4.7 Medium Oct 27, 2026
CVE-2026-117961 Incorrect boundary conditions in the Layout: Text and Fonts component 8.1 High Oct 27, 2026
CVE-2026-117957 Cryptographic issue in the WebRTC: Networking component 8.1 High Oct 27, 2026
CVE-2026-117958 Site isolation issue in the Networking: HTTP component 8.1 High Oct 27, 2026
CVE-2026-117959 Site isolation issue in the DOM: Service Workers component 8.1 High Oct 27, 2026

Other Mozilla products