Skip to content

Known vulnerabilities in Mozilla Thunderbird

Is your version affected?

CVE Summary Score Published
CVE-2026-2800 Spoofing issue in the WebAuthn component in Firefox for Android 9.8 Critical Feb 24, 2026
CVE-2026-2801 Incorrect boundary conditions in the JavaScript: WebAssembly component 7.5 High Feb 24, 2026
CVE-2026-2798 Use-after-free in the DOM: Core & HTML component 8.8 High Feb 24, 2026
CVE-2026-2799 Use-after-free in the DOM: Core & HTML component 8.8 High Feb 24, 2026
CVE-2026-2797 Use-after-free in the JavaScript: GC component 8.8 High Feb 24, 2026
CVE-2026-2795 Use-after-free in the JavaScript: GC component 8.8 High Feb 24, 2026
CVE-2026-2796 JIT miscompilation in the JavaScript: WebAssembly component 9.8 Critical Feb 24, 2026
CVE-2026-2793 Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and… 9.8 Critical Feb 24, 2026
CVE-2026-2791 Mitigation bypass in the Networking: Cache component 9.8 Critical Feb 24, 2026
CVE-2026-2792 Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 9.8 Critical Feb 24, 2026
CVE-2026-2790 Same-origin policy bypass in the Networking: JAR component 8.8 High Feb 24, 2026
CVE-2026-2788 Incorrect boundary conditions in the Audio/Video: GMP component 9.8 Critical Feb 24, 2026
CVE-2026-2789 Use-after-free in the Graphics: ImageLib component 8.8 High Feb 24, 2026
CVE-2026-2787 Use-after-free in the DOM: Window and Location component 8.8 High Feb 24, 2026
CVE-2026-2785 Invalid pointer in the JavaScript Engine component 8.8 High Feb 24, 2026
CVE-2026-2786 Use-after-free in the JavaScript Engine component 8.8 High Feb 24, 2026
CVE-2026-2784 Mitigation bypass in the DOM: Security component 9.8 Critical Feb 24, 2026
CVE-2026-2783 Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component 6.5 Medium Feb 24, 2026
CVE-2026-2782 Privilege escalation in the Netmonitor component 8.8 High Feb 24, 2026
CVE-2026-2781 Integer overflow in the Libraries component in NSS 8.8 High Feb 24, 2026
CVE-2026-2779 Incorrect boundary conditions in the Networking: JAR component 9.8 Critical Feb 24, 2026
CVE-2026-2780 Privilege escalation in the Netmonitor component 8.8 High Feb 24, 2026
CVE-2026-2778 Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component 10.0 Critical Feb 24, 2026
CVE-2026-2776 Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software 10.0 Critical Feb 24, 2026
CVE-2026-2777 Privilege escalation in the Messaging System component 9.8 Critical Feb 24, 2026

Other Mozilla products