| CVE-2026-92240 |
A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an…
|
9.1
Critical
|
Sep 15, 2026 |
| CVE-2026-92238 |
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety…
|
9.8
Critical
|
Sep 15, 2026 |
| CVE-2026-92079 |
Mitigation bypass in the Widget: Win32 component
|
9.1
Critical
|
Sep 15, 2026 |
| CVE-2026-92075 |
Mitigation bypass in the Networking component
|
9.1
Critical
|
Sep 15, 2026 |
| CVE-2026-92071 |
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
|
9.6
Critical
|
Sep 15, 2026 |
| CVE-2026-92066 |
Sandbox escape in the Profile Backup component
|
9.8
Critical
|
Sep 15, 2026 |
| CVE-2026-92061 |
Incorrect boundary conditions in the Security: Process Sandboxing component
|
9.8
Critical
|
Sep 15, 2026 |
| CVE-2026-92059 |
Incorrect boundary conditions in the DOM: Editor component
|
9.3
Critical
|
Sep 15, 2026 |
| CVE-2026-92057 |
Mitigation bypass in the Enterprise Policies component
|
9.1
Critical
|
Sep 15, 2026 |
| CVE-2026-92051 |
Spoofing issue due to invalid pointer in the Graphics component
|
9.1
Critical
|
Sep 15, 2026 |
| CVE-2026-92050 |
Sandbox escape due to race condition in the XPConnect component
|
9.1
Critical
|
Sep 15, 2026 |
| CVE-2026-92048 |
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
|
9.0
Critical
|
Sep 15, 2026 |
| CVE-2026-92045 |
Sandbox escape due to incorrect boundary conditions in the WebRTC component
|
9.6
Critical
|
Sep 15, 2026 |
| CVE-2026-92041 |
Mitigation bypass in the DOM: Networking component
|
9.1
Critical
|
Sep 15, 2026 |
| CVE-2026-92038 |
Mitigation bypass in the Remote Settings Client component
|
9.1
Critical
|
Sep 15, 2026 |
| CVE-2026-92037 |
Incorrect boundary conditions in the DOM: Animation component
|
9.8
Critical
|
Sep 15, 2026 |
| CVE-2026-92036 |
Incorrect boundary conditions in the Networking: HTTP component
|
9.8
Critical
|
Sep 15, 2026 |
| CVE-2026-92035 |
Sandbox escape due to incorrect boundary conditions in the Graphics component
|
9.6
Critical
|
Sep 15, 2026 |
| CVE-2026-92034 |
Site isolation issue in the Graphics component
|
9.1
Critical
|
Sep 15, 2026 |
| CVE-2026-92032 |
Sandbox escape due to invalid pointer in the Graphics component
|
9.6
Critical
|
Sep 15, 2026 |
| CVE-2026-92018 |
Sandbox escape in the DOM: Core & HTML component
|
9.6
Critical
|
Sep 15, 2026 |
| CVE-2026-84639 |
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used
|
9.1
Critical
|
Sep 1, 2026 |
| CVE-2026-84637 |
Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on…
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84143 |
Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14
|
9.8
Critical
|
Sep 1, 2026 |
| CVE-2026-84142 |
Internally found bugs present in Thunderbird 154
|
9.8
Critical
|
Sep 1, 2026 |